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Foreword 


The primary focus of this report is on the management, use, and congressional 
oversight of information technology in the Federal Government. Rapid advances 
in technology-such as microcomputers, computer networking, computer model¬ 
ing, videoconferencing, and electronic information exchange-are generating many 
new applications, opportunities, and issues that warrant congressional attention. 

The report addresses five major areas: 1) management of information tech¬ 
nology, including strategic planning, innovation, procurement, and the informa¬ 
tion resources management (IRM) concept; 2) information systems security and 
computer crime; 3) information technology and decision support; 4) management 
of government information dissemination; and 5) opportunities for using infor¬ 
mation technology in conducting congressional oversight. 

Prepared at the request of the Senate Committee on Governmental Affairs 
and the House Committee on theJ udiciary, Subcommittee on Courts, Civil Lib¬ 
erties, and the Administration of J ustice, this report is the second component of 
the OTA assessment of "Federal Government Information Technology: Congres¬ 
sional Oversight and Civil Liberties. " The first component, Electronic Survai- 
lanceand Civil Liberties, was published in October 1985. The third component, 
Electronic Record Systems and Individual Privacy, is forthcoming in 1986. 

In preparing this report, OTA has drawn on working papers developed by 
OTA staff and contractors, the comments of participants at four OTA workshops 
on these topics, and the results of an OTA survey sent to over 140 agency units. 
Drafts of this report were reviewed by the OTA project advisory panel, officials 
from the U.S. Office of Management and Budget, General Services Administra¬ 
tion, and National Bureau of Standards; the U.S. Departments of Agriculture, 
Commerce, Defense (including the National Security Agency), Education, Interior, 
State, and Transportation; the Federal Bureau of Investigation (Justice), Federal 
Emergency Management Agency, National Archives and Records Administra¬ 
tion, Nuclear Regulatory Commission, and Veterans Administration; and a broad 
spectrum of interested individuals from other Federal agencies, the research com¬ 
munity, and private industry. 

OTA appreciates the participation of the advisory panelists, workshop par¬ 
ticipants, Federal agency officials who responded to OTA'S survey and/or pro¬ 
vided review comments, and others who helped bring this report to fruition. The 
report itself, however, is solely the responsibility of OTA, not of those who so 
ably advised and assisted us in its preparation. 
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Chapter 1 

Summary 


INTRODUCTION 


Information technology-including comput¬ 
ers, software, telecommunications, and the 
like-is critically important to the functioning 
of the U.S. Government. By any measure, the 
Federal Government-with its roughly 27,000 
mainframe computers, over 100,000 micro¬ 
computers, and over 170,000 mainframe com¬ 
puter terminals 1 -has the largest inventory of 
computer equipment of any single organiza¬ 
tion or government in the world. 

However, much of the policy framework pre¬ 
viously established by Congress to control, 
oversee, and encourage the management and 
use of Federal information technology has 
been overtaken by the rapid pace at which new 
technology applications, issues, and opportu¬ 
nities are being generated. 

'Unless otherwise noted, statistics cited in this chapter are 
based on the OTA Federal Agency Data Request that was sent 
to the 13 cabinet departments and 20 selected independent agen¬ 
cies, and to which 142 agency components responded. See app. 
B for a list. 


In addition, the Federal Government is not 
maximizing the return on its substantial in¬ 
formation technology investment (conserva¬ 
tively estimated at $60 billion over fiscal years 
1982-86 2 ) with respect to improving: 1) the effi¬ 
ciency of government in delivering services; 
2) the security and privacy of information 
maintained in computerized systems; and 3) 
the quality of government management itself. 
Also, the congressional intent as originally em¬ 
bodied in laws such as the Paperwork Reduc¬ 
tion Act, Freedom of Information Act, Privacy 
Act, Public Printing Act, and Omnibus Crime 
Control Act is not being fully carried out due 
in part to new technological applications and 
issues not envisioned at the time of enactment. 


'Based on Office of Management and Budget (OMB) data. 
Does not include some telecommunication costs or information 
technology activities that are classified or embedded in other 
agency programs. 


MANAGEMENT OF INFORMATION TECHNOLOGY 


The management of Federal Government in¬ 
formation technology has received high-level 
congressional and executive branch attention 
for at least two decades, with a new round of 
studies, reports, and policy initiatives every 
several years. Management issues involving 
planning, procurement, security, and the like 
must be revisited periodically because of the 
dynamic nature of the technology and chang¬ 
ing applications. 

Major studies from the Coremission on Fed¬ 
eral Paperwork in 1977 through the Grace 
Commission in 1983 reported on needed im¬ 
provements in Federal information technology 
management. In the last few years, the Office 
of Management and Budget (OMB), General 


Services Administration (GSA), and various 
individual agencies have taken numerous man¬ 
agement initiatives. And most recently, OMB 
has given attention to information technology 
management both as part of overall govern¬ 
ment management and through specific actions 
such as the December 1985 circular on "Man¬ 
agement of Federal Information Resources."3 

Nonetheless, OTA identified several further 
needs for management improvement that ap¬ 
pear to be crucial to realizing the full poten- 


3 See Office of Management and Budget, Management of the 
United States Government Fisca) Year 1986, and OMB, Cir¬ 
cular A-l 30 on "Management of Federal Information Re¬ 
sources," issued Dec. 12, 1985. Also see OMB, Management 
of the United States Government Fiscal Year 1987. 


3 
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tial of information technology for increasing 
the efficiency and effectiveness of government. 
These are discussed briefly below. Many of 
these needs could be met by the executive 
branch acting alone. However, Congress can 
facilitate, encourage, and, where necessary, re¬ 
quire these actions. 

Strategic Planning 

The annual "5-year plans" currently pub¬ 
lished by OMB (as mandated by the Paper¬ 
work Reduction Act) have several significant 
deficiencies. While the documents are grad¬ 
ually becoming more comprehensive, they are 
not "plans," and they do not analyze strate¬ 
gies for using information technology to fur¬ 
ther government missions, either on a govern¬ 
mentwide or individual agency basis. There is 
no real vision of the future and little discus¬ 
sion of alternative strategies for use and man¬ 
agement of information technology. 

Despite some more recent efforts to develop 
thoughtful plans, many agency planning ef¬ 
forts still have some major flaws, including a 
failure to: 

• include strategic as well as operational 
plans; 

• identify innovative opportunities for use 
of information technology; 

• connect planning effectively to implemen¬ 
tation; 

• involve users, clients, and the interested 
public in the planning process; and 

• explicitly consider the implications of in¬ 
formation technology use for protection 
of information security and privacy. 

One vehicle available to Congress for imple¬ 
menting improvements in planning (and other 
areas) is the Paperwork Reduction Act of 
1980, which in part established an information 
technology management framework for the 
government. The act is overdue for reauthor¬ 
ization and could be amended to provide a 
more precise mandate on the strategic plan¬ 
ning process and the contents of the 5-year 
plans. 


Information Availability and 
Data Quality 

The weaknesses of the 5-year plans are com¬ 
pounded by serious deficiencies in the scope 
and quality of information available to Con¬ 
gress, and to the agencies themselves, on key 
Federal information technology trends and ap¬ 
plications. These deficiencies can hamper ef¬ 
fective congressional oversight and agency 
decisionmaking. For this study, in the absence 
of much needed information, OTA conducted 
its own survey of Federal agency use of infor¬ 
mation technology (see app. B for discussion 
of OTA's Federal Agency Data Request). 

A related problem is that the results of Gen¬ 
eral Accounting Office (GAO) audits, com¬ 
puter matches of various Federal record sys¬ 
tems, and a variety of other internal and 
external audits and studies indicate that the 
quality (completeness and accuracy) of data 
and records in Federal computerized systems 
varies widely—from quite good to very poor. 4 
Agency (and congressional) decisions based on 
inaccurate and incomplete information can 
lead to wasteful or even harmful results or to 
missed opportunities and failure to identify 
key problems. 

OTA found that there is a need: 1) to specify 
the types of information that should be re¬ 
ported on a periodic or continuous basis in or¬ 
der to assist both congressional and central 
agency oversight of Federal information tech¬ 
nology, and 2) to strengthen the data quality 
standards and procedures applicable to com¬ 
puterized Federal systems. 

Innovation 

Where OTA identified examples of agency 
in novation-such as the use of electronic mail, 
videoconferencing, and computer-based deci¬ 
sion support—the exchange of this experience 


‘For further discussion of Federal record quality, see U.S. Con¬ 
gress, Office of Technology Assessment, Federal Government 
Information Technology: Electronic Record Systems and In¬ 
dividual Privacy, 1986 forthcoming. 
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and learning with other agencies appeared to 
be irregular or nonexistent. A common institu¬ 
tional problem is that many agencies either be 
lievethat publicizing innovation is "just ask¬ 
ing for trouble' or view many innovations as 
too risky to try at all. 

OTA concluded that actions to encourage 
agency innovation are needed, such as: es¬ 
tablishing informal and formal mechanisms 
to exchange experiences gained and lessons 
learned; developing guidelines that provide 
agencies with room to innovate, but also help 
detect and resolve emerging issues before they 
impair the innovation process; and possibly 
designating a Federal information technology 
innovation center (or centers). 

Procurement 

Government information technology pro¬ 
curement is subject to multiple and sometimes 
conflicting efforts to simultaneously expedite 
the procurement process (e.g., through GSA's 
delegation of procurement authority), increase 
the level of competition (e.g., through congres¬ 
sional enactment of the Competition in Con¬ 
tracting Act), and more clearly demonstrate 
a significant return on investment in informa¬ 
tion technology (as now required by OMB). 

OTA concluded that it is too early to fully 
assess the overall impact of these procurement 
initiatives. However, there is considerable evi¬ 
dence of reduced technological obsolescence 
over the last 10 years. For example, Federal 
agencies responding to the OTA survey re¬ 
ported, collectively, a reduction in percentage 
of Federal mainframe computers over 6 years 
old from about 60 percent in 1975 to 10 per¬ 
cent in 1984; and an increase in mainframe 
computers under 3 years old from 30 percent 
in 1975 to 60 percent in 1984. 

Beyond the availability of relatively new 
equipment, the "success" of procurement is 
closely tied to the government's ability to plan 
and define technology needs and to match 
technology to those needs. It is in this area 


particularly that problems persist, especially 
with the larger systems, such as at the Inter¬ 
nal Revenue Service and Social Security Ad¬ 
ministration. 5 There still appears to be a need 
for: better training of procurement staff, great¬ 
er senior management involvement in and 
understanding of the planning and procure¬ 
ment process, improved mechanisms to ex¬ 
change procurement experience and learning, 
and possibly a procurement and management 
troubleshooting team to assist with serious 
trouble spots. 

Information Resources Management 
(IRM) 

In enacting the Paperwork Reduction Act 
(PRA), Congress directed that each agency 
designate a high-level official responsible for 
all aspects of the management of information 
technology. The information resources man¬ 
agement (IRM) concept was intended to bring 
together previously disparate functions-such 
as computers, telecommunications, office auto 
mation, and the like-and to establish the im¬ 
portance of information as a resource. 

OTA found that, while agencies have des¬ 
ignated an IRM officer, actual implementation 
of IRM varies widely and has been only par¬ 
tially or minimally implemented in many agen¬ 
cies. And the Paperwork Reduction Act pro¬ 
vides limited or no direct guidance in some key 
areas such as: the use of information technol¬ 
ogy to support agency decisionmaking (e.g., 
computer-based decision support), and public 
information technology and policy (e.g., elec¬ 
tronic databases and electronic dissemination 
of government information). OTA concluded 
that there is a need to review progress in PRA 
implementation since 1980 and clarify the 
scope of authority and responsibilities in¬ 
tended for IRM officers. 


5 0TA is conducting a separate in-depth case study entitled 
Federal Government I rtf or mation Technology: Case Study of 
theSocial Security Administration, forthcoming in summer/fall 
1986. 
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INFORMATION SYSTEMS SECURITY AND COMPUTER CRIME 


Information Systems Security" 

An important management responsibility is 
maintaining the security of information sys¬ 
tems. If proper security is not maintained, the 
government cannot assure: 1) the continuity 
and effectiveness of government operations; 
2) the quality (e.g., accuracy and completeness) 
of information in Federal systems; or 3) con¬ 
trol over those types of information (e.g., per¬ 
sonal, proprietary, classified) to which access 
is limited by law or regulation. 

The proliferation of microcomputers, contin¬ 
uing rapid increase in mainframe computer 
systems, large percentage of computerized 
Federal records (e.g., about 80 percent of 
Privacy Act records are maintained in fully or 
partially computerized systems), and growing 
use of electronic data linkages of all sorts, 
clearly have increased the difficulty and com¬ 
plexity of protecting government information. 
Information systems security is now recog¬ 
nized as a serious problem by both civilian and 
military agencies; the President emphasized 
information systems security in the Septem¬ 
ber 1984 National Security Decision Directive 
(NSDD) 145, as has OMB in its December 
1985 information management circular. 

There is, indeed, cause for concern. OTA 
found that agencies are often not implement¬ 
ing the measures mandated or suggested un¬ 
der prior policy guidance. For systems that 
process sensitive but unclassified information, 
OTA found that: 

• about 40 percent of agencies responding 
have not conducted a risk analysis dur¬ 
ing the last 5 years, 25 percent do not 
screen personnel with computer access, 
and 50 percent do not screen computer ap- 
plications for sensitivity; 

• in addition, about 40 percent of agencies 
do not use audit software or restrictions 
on dial-up (remote) access to mainframe 

'For further discussion of technical security options, see the 
OTA study on N&n Communications Technology: Implications 
for Privacy and Security is expected to be completed in winter 
1986-87. 


computers, and about 80 percent do not 
use encryption; and 

• finally, about 75 percent of agencies re¬ 

sponding do not have an explicit security 
policy for microcomputers, and about 60 
percent do not have (and are not develop¬ 
ing) contingency plans for use if main¬ 
frame computers are disrupted. 

The Administration's approach, through 
NSDD 145, has been to assign a much strong¬ 
er role to the military and to the National 
Security Agency (NSA) in particular. While 
this may well strengthen Federal leadership 
in information systems security, it also puts 
the national security community in an unusu¬ 
al, influential if not controlling position on this 
key aspect of information policy, and could 
heighten tension between the defense and ci¬ 
vilian sectors. 

OTA identified several options on informa¬ 
tion systems security that warrant consider¬ 
ation, including: 

• designating a civilian agency to provide 
information security training and techni¬ 
cal support to the civilian sector (similar 
to NSA's role in the defense sector); 

• changing budget procedures to provide 
more visibility for computer and telecom¬ 
munications security in agency budget re¬ 
quests (i.e., a security line item); and 

• codifying part or all of NSDD 145 into 
law, clarifying the roles of NSA and civil¬ 
ian agencies so as to remove the possibil¬ 
ity that national security agencies might 
have undue control over civilian agency 
functions. 

Some of these options are reflected, at least 
in part, in H .R. 2788, the "Computer Securi¬ 
ty Research and Training Act of 1985, " as 
amended. 

Computer Crime 

One purpose of good security is, of course, 
to protect against criminal activity directed 
towards computer systems and the informa¬ 
tion they contain. Technical and administra- 
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tive measures are important parts of good 
security. But, in addition, criminal laws on 
computer abuse can provide another disincen¬ 
tive for potential violators and facilitate prose 
cution when crimes occur. 

Since the 1970s, there has been a growing 
consensus that existing criminal laws cover¬ 
ing the variety of crimes that can be commit¬ 
ted with a computer (e.g., fraud, theft, embez¬ 
zlement, invasion of privacy, trespass) either 
do not cover some computer abuses, or are not 
strong and clear enough to discourage comput¬ 
er crimes and allow expeditious prosecution. 
The available evidence suggests that signifi¬ 
cant losses have occurred. However, the total 
volume and severity of computer crime is un¬ 
known, given a scarcity of reliable information. 
Nonetheless, the potential (if not current) prob¬ 
lem is thought to be so serious that 45 States 
and, in 1984, the Federal Government, have 
enacted computer crime laws. 

Congress could fine-tune this Federal law 
(Computer Fraud and Abuse Act of 1984), giv¬ 
ing particular attention to the following areas, 
among others: extending the coverage to pri¬ 
vate sector computers operating in interstate 
commerce (currently only Federal computers 
and those operated by certain financial insti¬ 
tutions are covered); refining any overly broad 
language (e.g., with respect to unintentionally 
restricting computerized dissemination of or 
access to public information); and establish¬ 
ing a mandatory computer crime reporting 
system for Federal agencies (OTA found that 
only about one-fifth of agencies have a com¬ 
puter crime tracking system or procedures). 

OTA found that because many Federal (as 
well as private) computer systems have com¬ 


puters located in more than one State and/ 
or use data communication networks that rou¬ 
tinely cross State lines. State jurisdiction can 
be hard to establish, given the dynamic nature 
of computer/communications linkages. On this 
basis, OTA concluded that some form of in¬ 
terstate Federal computer crime law is war¬ 
ranted. 

In general, OTA concluded that effective 
computer crime legislation needs to balance 
concerns about the potentially serious nature 
of such crime with other factors, such as: 

• the responsibilities of vendors, owners, 
and users for the security of their systems; 

• the need for effective administrative and 
technical security measures; 

• the need to balance Federal and State 
roles in the prosecution of computer crime; 

• consistency with other aspects of Federal 
information policy (e.g., Privacy Act, 
Freedom of Information Act, Omnibus 
Crime Control Act); and 

• consistency with State computer crime 
laws. 

Several of these and other factors are re¬ 
flected in legislation under active congression¬ 
al consideration, including: H.R. 1001, "Coun¬ 
terfeit Access Device and Computer Fraud 
and Abuse Act of 1985"; H.R. 930, "National 
Computer Systems Protection Act of 1985"; 
S. 440, "Computer Systems Protection Act of 
1985"; S. 610, amendment to Computer Fraud 
and Abuse Act; and S. 1678 (and H.R. 3381), 
"Federal Computer Systems Protection Act 
of 1985. " 


INFORMATION TECHNOLOGY AND DECISION SUPPORT 


One of the less visible but important appli¬ 
cations of information technology is to sup¬ 
port decisionmaking. In the context of the 
Federal Government, this could include deci¬ 
sions about governmentwide or agency-specif¬ 
ic policies, plans, priorities, budgets, and/or 


program implementation options. The range 
of possible applications includes, for example: 
the use of simple spreadsheet software on 
microcomputers to help analyze budget op¬ 
tions; the running of complex simulation mod¬ 
els to better understand the possible impacts 
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of alternative program strategies; the collec¬ 
tion and synthesis of information from several 
electronic databases relevant to the decision 
at hand; the use of computer graphics to ana¬ 
lyze and display key trend and foresight in¬ 
formation; and participation in decision con¬ 
ferences where decisionmakers (and staff) use 
computer and analytical tools to help work 
through a decision problem. 

At the outset of this study, OTA found lit¬ 
tle systematic information on the use of com¬ 
puter-based decision support in the Federal 
Government. Computer modeling and elec¬ 
tronic databases are not included within the 
purview of senior IRM officials as their re¬ 
sponsibilities are commonly defined. Nor does 
the language or legislative history of the Pa¬ 
perwork Reduction Act provide guidance as 
to whether these information technology ap¬ 
plications were intended to be included within 
IRM. 

The results of OTA's Federal Agency Data 
Request provide a profile of the extent and use 
of these techniques. For example: 

• about 60 percent of Federal agency units 
report at least some use of computer mod¬ 
eling, frequently for decision support (but 
also for research and scientific purposes), 
with the number of applications ranging 
up to 2,000 per agency component; and 

• use of computer-based decision analytic 
techniques appears to have increased dra¬ 
matically since the advent of microcom¬ 
puters: 

—about 90 percent of Federal agency 
units report use of spreadsheet software; 
—about half use quantitative decision 
techniques (e.g„ linear programming, sys¬ 
tems analysis, critical path analysis); 
—about one-fourth use forecasting tech¬ 
niques (e.g., regression analysis) and 
quantitative decision analytic tech¬ 
niques; and 

—about one-twentieth use computer-as¬ 
sisted decision conferences and/or com¬ 
puter conferencing. 

Overall, executive branch officials believe 
these techniques to be very useful, even essen¬ 


tial, to agency decisionmaking. However, few 
can document this claim other than by citing 
ad hoc examples, because there has been lit¬ 
tle research on the impact of decision support 
techniques on agency decisionmaking and lit¬ 
tle effort to exchange experience among agen¬ 
cies using these techniques. 

OTA identified several possible actions that 
could help to: 1) improve sharing of expertise 
and learning about computer-based decison 
support; 2) facilitate congressional and pub¬ 
lic access where appropriate; 3) enhance under¬ 
standing of the strengths and limitations, uses 
and abuses of computer modeling and elec¬ 
tronic databases; and 4) improve the govern¬ 
ment's return on a significant investment. 
Possible actions that warrant consideration 
include: 

• establishing guidelines or standards for 
model documentation, verification, and 
validation (at least for major models); 

• establishing directories or indices to ma¬ 
jor computer models and electronic data¬ 
bases; 

• clarifying procedures on congressional 
and public access to agency computer 
models and databases; 

• conducting further research on the impact 
of computer-based decision support on 
agency decisionmaking; 

• conducting further testing and develop¬ 
ment of the decision conference technique; 

• developing a formalized foresight capabil¬ 
ity in major agencies; and 

• establishing clear institutional responsi¬ 
bility for some or all of the above, possi¬ 
bly by including decision support as part 
of information resources management. 

A significant, unrealized potential of infor¬ 
mation technology is to improve the foresight 
capability of the government. Foresight can 
be viewed as a component of decision support 
that involves monitoring and analyzing key 
longer term trends and their implications for 
government policies and programs. The com¬ 
bination of computer modeling, electronic data 
collection, and various decision analytic tech- 
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niques used in a decision conference format 
may be an effective technical approach to im¬ 
prove governmentwide foresight capability, 
when coupled with institutional mechanisms 
that cut across agency and disciplinary lines. 
OTA identified several possible actions to help 
accomplish the latter, ranging from: bringing 
foresight into the scope of information re¬ 
sources management, to including foresight 


functions as part of agency decision support 
centers, to establishing separate foresight 
offices organized by agency or by subject 
matter, and to setting up a governmentwide 
foresight office that would pull together key 
trends information from the various agencies 
(as envisioned in S. 1031, the Critical Trends 
Assessment Act of 1985). 


MANAGEMENT OF GOVERNMENT INFORMATION 

DISSEMINATION 


Information technology holds out the prom¬ 
ise of faster, cheaper, and more efficient col¬ 
lection (e.g., through computer-aided surveys 
and document filings), maintenance (e.g., in 
computerized databases and optical disks), 
and dissemination of government information 
(e.g, via electronic mail, interactive data net¬ 
works, electronic bulletin boards, remote print¬ 
ing-on-demand, and computer tape exchange). 
OTA's preliminary research in this area sug¬ 
gests that the Federal Government is at or 
near the threshold of a major shift toward 
greater use of information technology for man¬ 
aging government information. These technol¬ 
ogies could revolutionize the public informa¬ 
tion functions of the government. 

At the same time, because government in¬ 
formation is vital to so many users—in and 
outside of government-and central to numer¬ 
ous public laws and agency missions, the im¬ 
pending shift is raising a wide range of policy 
issues. The issues are complicated because of 
perceived tensions between: 

• public access and the public's right to 
know (as embodied in the Freedom of In¬ 
formation Act) and the role of Federal 
agencies in actively disseminating public 
information (as mandated in the Public 
Printing Act and numerous authorizing 
statutes); 

• management efficiency and cost reduction 
(per OMB circulars, the Deficit Reduction 
Act, and, to some extent, the Paperwork 
Reduction Act); and 


Z particularly for scientific and technical in¬ 
formation, national security and foreign 
trade concerns. 

OTA concluded that further research in this 
area is warranted, but that, ultimately, Con¬ 
gress is likely to be called on to update exist¬ 
ing public information laws and address a va¬ 
riety of trends and issues such as: 

• reduction of paperwork and publications; 

• increasing use of electronic dissemination; 

• cost-effectiveness of electronic informa¬ 
tion options; 

• equity of access to government electronic 
information; 

• private sector role in Federal electronic in¬ 
formation activities; 

• institutional responsibility for govern¬ 
ment information collection, dissemina¬ 
tion, policy, and operations; 

• need for a public information index or 
clearinghouse; 

• mechanisms for exchange of learning and 
innovation; 

• Freedom of Information Act implemen¬ 
tation; 

• electronic recordkeeping and archiving; 

• scientific and technical information ex¬ 
change; and 

• other issues such as transborder informa¬ 
tion flow, depository library system, Fed¬ 
eral statistical system, and copyright pro¬ 
tection. 
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INFORMATION TECHNOLOGY AND CONGRESSIONAL 

OVERSIGHT 


This report focuses primarily on executive 
agency management and use of information 
technology, and congressional oversight there¬ 
of. The trends, issues, and options discussed 
are properly within the purview of congres¬ 
sional oversight of executive branch programs, 
activities, and implementation of public laws. 
However, information technology also has a 
potential role in the actual conduct of congres¬ 
sional oversight. 

Congress as a whole has made great strides 
over the last 10 to 15 years in using informa¬ 
tion technology with respect to legislative 
information retrieval, constituent mail and 
correspondence management, and some ad¬ 
ministrative functions. However, the use of in¬ 
formation technology for direct support of pol¬ 
icymaking and oversight is just beginning. 

OTA identified significant unrealized oppor¬ 
tunities for congressional use of information 
technology in conducting oversight, and an ap¬ 
parent lack of clear strategy for such use. A 
similar situation exists at the State level, 
based on an OTA review of relevant activities 
in nine State legislatures (California, New 
York, Wisconsin, Minnesota, Florida, Wash¬ 
ington, Texas, Virginia, and South Dakota). 


Four specific opportunities identified by 
OTA include: 1) direct access by congressional 
committees and staff to agency electronic files; 
2) use of computer-based modeling and deci¬ 
sion support; 3) video- and computer-confer¬ 
encing to augment committee and staff over¬ 
sight activities; and 4) electronic tracking of 
agency and executive actions. Congress may 
wish to plan and conduct a series of pilot tests 
and demonstrations in each of these areas, in 
order to more accurately assess the benefits, 
costs, and problems. 

The pilot test approach has worked in the 
past for new technological applications in Con¬ 
gress. Pilot tests of congressional oversight 
applications should be useful to help familiar¬ 
ize Members and staff with new applications, 
identity needs for training, and develop the 
best match or fit between a particular appli¬ 
cation and the needs of specific committees, 
Members, and staff. Also, while Congress has 
strong constitutional powers to oversee and 
obtain information from the executive branch, 
pilot tests would help familiarize the agencies 
with new applications, identify any needed ad¬ 
justments, and generally seek approaches that 
minimize possible concerns about separation 
of powers and executive privilege. 


IN CONCLUSION 


OTA's assessment of Federal Government 
information technology has identified signifi¬ 
cant progress, problems, and opportunities for 
improvement in the management and use of 
this very important technology. Many of the 
needed improvements can and ultimately 
would have to be implemented by the execu¬ 
tive branch itself. Congress can facilitate and 
encourage appropriate actions through effec¬ 
tive oversight and, where necessary, legisla¬ 
tive remedies. 

Chapters 2 through 8 of this report provide 
technical and policy analyses relevant to pro¬ 
posed legislation and policy initiatives on in¬ 
formation technology management, including 


legislation on information systems security 
and computer crime noted earlier, possible 
amendments to the Paperwork Reduction Act 
and Public Printing Act, and governmentwide 
management initiatives such as the "Govern¬ 
ment Management Report Act of 1986. " 

Appendix A to this report briefly discusses 
other related issues that warrant congression¬ 
al attention, but are outside the primary fo¬ 
cus of this document. Appendix B describes 
the methodology of and respondents to OTA's 
Federal Agency Data Request. Appendix C 
lists the OTA contractor papers relevant to 
this report. Appendix D lists outside reviewers 
and contributors. 
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Chapter 2 

Trends in Federal Government 
Information Technology Management 


SUMMARY 


The Federal Government has been a major 
user of information technology since the de¬ 
velopment of the first generation of digital 
computers over three decades ago. With each 
new generation of technology, the govern¬ 
ment's computer applications have grown and 
diversified to the point where, today, informa¬ 
tion technology is vital to the performance of 
agency missions and the functioning of the 
government itself. 

For the 142 agency components responding 
to OTA's Federal Agency Data Request, the 
total number of mainframe computer central 
processing units more than doubled from about 
11,000 in 1980 to about 27,000 in 1985, main¬ 
frame computer terminals more than quadru¬ 
pled from about 36,000 to over 170,000, and 
microcomputers increased (conservatively) 
from a few thousand to about 100,000. In sum, 
the Federal Government has amassed the 
largest inventory of computer equipment in 
the world, with a cumulative information tech¬ 
nology budget conservatively estimated at 
over $60 billion (current dollars) for the last 
five fiscal years. 

The management of Federal Government in¬ 
formation technology has received high-level 
congressional and executive branch attention 
for at least the last two decades, with a new 
round of studies, reports, and policy initiatives 
occurring at least every 5 years or so. Man¬ 
agement issues involving planning, procure¬ 
ment, security, and the like must be revisited 
periodically because of the dynamic nature of 
the technology, among other reasons. Manage 
ment approaches and policies that worked in 
the first-generation, centralized computer 
environment may not be effective or appropri¬ 


ate for the decentralized computer and com¬ 
munication environment that exists today. 

Major milestones in Federal information 
technology management include the: 

• 1959 Bureau of the Budget study on the 
need for automatic data processing (ADP) 
leadership; 

• 1965 Brooks Act (Public Law 89-306) es¬ 
tablishing ADP management and procure¬ 
ment policies; 

• 1977 Commission on Paperwork report on 
information resources management (IRM) 
as a management concept; 

• 1979 Office of Management and Budget 
(OMB) Federal Data Processing Reorga¬ 
nization Project recommending manage¬ 
ment improvements; 

• 1980 Paperwork Reduction Act (Public 
Law 96-511) establishing centralized in¬ 
formation technology management by 
OMB and agency IRM officers; and 

• 1983 Grace Commission report on needed 
improvements in information technology 
management and planning. 

Major themes cutting across all of these ac¬ 
tivities include the need for the Federal Gov¬ 
ernment to: 

• be vigilant in staying abreast of advanc¬ 
ing information technology; 

• conduct effective planning to identify op¬ 
portunities where the technology can help 
improve government performance; 

• ensure that acquisition of the technology 
is cost-effective and competitive; and 

• manage the technology, once acquired, 
efficiently and with sensitivity to the 
broader implications (e.g., privacy and 
security). 
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The Paperwork Reduction Act of 1980 is 
particularly significant because it was in¬ 
tended to change information technology man¬ 
agement practices in two fundamental ways. 
First, it was intended to bring together pre¬ 
viously disparate functions under one manage¬ 
ment structure—specifically ADP, telecom¬ 
munications, office automation, information 
systems development, data and records man¬ 
agement, and, possibly, printing and libraries. 
Second, the act reorients the focus of informa¬ 
tion technology management from only hard¬ 
ware and procedures to i ndude the i nforma- 
tion itself, by establishing the importance of 
information as a resource and the concept of 
information resources management (known as 
IRM). 

At the present time, IRM has been only par¬ 
tially implemented by the Federal agencies, 
and it is unclear whether it will eventually be 
implemented more completely throughout 
government. The General Services Adminis¬ 
tration (GSA) has just begun to carry out tri¬ 
ennial reviews of agency IRM plans and ac¬ 
tivities, and OMB has issued guidelines for 
long-range information technology planning 
and a circular on "Management of Federal In¬ 
formation Resources. " However, Congress 
may wish to provide further guidance through 
amendments to the Paperwork Reduction Act, 
which has not been updated since 1980 and is 
overdue for reauthorization. Some possible 
congressional actions are discussed in the next 
chapter. 

Another recurring issue is information tech¬ 
nology procurement. Continuing procurement 
problems have been the focus of numerous 
General Accounting Office (GAO) reports and 
congressional hearings. Government procure¬ 
ment is subject to multiple and possibly con¬ 
flicting efforts to simultaneously expedite the 
procurement process (e.g., through GSA's in¬ 
creased delegation of procurement authority), 
increase the level of competition (e.g., through 


congressional enactment of the Competition 
in Contracting Act), and more clearly demon¬ 
strate a significant return on investment in 
information technology (as now required by 
OMB). 

OTA concluded that it is too early to fully 
assess the overall impact of these procurement 
initiatives. However, evidence available to 
OTA suggests that the average age of Federal 
computers has been decreasing. For example, 
the results of OTA'S Federal Agency Data Re 
quest indicate that the percentage of main¬ 
frame computers under 3 years old increased 
from about 30 percent in 1975 to 60 percent 
in 1984. And the percentage of mainframe 
computers over 6 years old decreased from 
about 60 to 10 percent over the same period 
of time. These results are generally consistent 
with those of related GSA and National Bu¬ 
reau of Standards studies. 

As for the length of the procurement proc¬ 
ess itself, there are few reliable indicators, and 
available data are mixed. Responses to the 
OTA Data Request indicated that the most 
frequently reported average procurement time 
for mainframe computers was 1 to 1.5 years 
in both 1980 and 1984, with relatively few 
procurements reported to have taken longer 
than 2.5 years. These time periods may still 
be excessive, but do not appear to be as lengthy 
as generally perceived. 

While there is a scarcity of reliable data 
about the government's ADP personnel, a va¬ 
riety of reports and expert opinion suggest 
that some agencies have serious problems at¬ 
tracting and retaining technical staff. Differ¬ 
ing salary levels between the government and 
the private sector are the most visible cause 
of such problems, although other contributing 
factors include the extent to which agency 
staff can work with up-to-date information 
technology, and the time it takes to classify 
and fill positions. 
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INTRODUCTION 


The first part of this chapter provides back¬ 
ground on policy issues and trends related to 
management of Federal information technol¬ 
ogy, while the second summarizes basic data 
on the extent of information technology use 
in government. Later chapters will analyze 
selected issues and policy options in detail. 

It should be emphasized that the manage¬ 
ment of information and technology is not an 
end in itself, but rather is a tool to further the 
various missions of Federal agencies. The 
most important question is not how well agen¬ 
cies use information technology, but how well 
they accomplish their missions. OTA's anal¬ 
ysis can identify trends, suggest problem 
areas, and suggest opportunities for further 
exploitation of information technology tools. 
Clearly though, each agency must consider 
these problems and opportunities in the con¬ 
text of its missions and circumstances. 

More than three decades have passed since 
digital computers were first sold commercially. 
In the 1950s, the Federal Government pio¬ 
neered many of the early uses of large-scale 
data processing. The first general-purpose 
data processing computer, the UN I VAC I, 
was installed at the Bureau of the Census in 
1951. Since that time, tremendous changes 
have occurred in the technology itself, in gov¬ 
ernment policies, and in organizations that use 
information technology. 

The exponential increase in the power and 
economy of computers since the 1950s has 
been well documented.' As developments such 
as the transistor and the integrated circuit 
have been exploited, the size and cost of com¬ 
puting machines have decreased by several 
orders of magnitude, and their processing 
speed and versatility have increased by simi- 


This report will not include a primer on trends in computer 
technology, because such material is readily available. See, for 
example, U.S. Congress, Office of Technology Assessment, In¬ 
formation Technology R&D: Critical Trends and Issues, OTA- 
CIT-268 (Washington, DC: U.S. Government Printing Office, 
February 1985); and U.S. Congress, Office of Technology As¬ 
sessment, Automation of America Offices, OTA-CIT-287 
Washington, DC: U.S. Government Printing Office, Decem¬ 
ber 1985). 


lar amounts. In addition, microcomputers 
burst onto the scene in the mid-1970s, chang¬ 
ing the nature of the problems for which com¬ 
puters could be used and spreading the con¬ 
trol of computing technology into the hands 
of more people, many without computing 
backgrounds. 

Networking, another major technical trend 
affecting government information technology 
management, is closely related to the micro¬ 
computer explosion. The past decade has 
brought substantial improvements in the ease 
with which information systems can commu¬ 
nicate with one another. Packet-switched net¬ 
works, for example, allow fast and cheap trans¬ 
fer of large amounts of data, usually between 
larger machines far apart; for smaller ma¬ 
chines, the local-area network (LAN) is being 
used extensively to connect microcomputers 
and word processors with each other and with 
larger machines within an office complex. The 
net effect is that it is much easier for infor¬ 
mation systems to be decentralized, linked, 
and interdependent. The management impli¬ 
cations of this trend include the technical and 
administrative challenges of designing dis¬ 
tributed computing networks, as well as the 
security considerations of increased interde¬ 
pendence.' 

While these trends in computer and telecom¬ 
munication hardware have received a great 
deal of attention, there has been an emerging 
consensus in the past few years that one of the 
most significant bottlenecks for expanded use 
of information systems is software, the in¬ 
structions that make information systems 
perform useful tasks. The development and 
maintenance of software systems are still ex¬ 
tremely labor-intensive, and both industry and 
government have begun to focus their man¬ 
agement attention on software. 3 


'See, for example, America Hidden Vulnerabilities:Crisis 
Management in a Society of Networks, A Report of the Panel 
on Crisis Management of the Georgetown Center for Strategic 
and International Studies, October 1984. Many of the security 
issues are discussed in ch. 4. 

'See, for example, Office of Management and Budget, Man¬ 
agement of the United States Government Fiscal Year 1986, 
pp. 47-52. 
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TRENDS IN INFORMATION TECHNOLOGY MANAGEMENT 


Major Studies and Policy Actions 

Many common themes can be found in the 
key reports and policy measures in this area 
over the past three decades-in particular, the 
need to use information technology effectively 
and to control the costs of that use, the need 
for foresight and planning, and the need for 
policy leadership and coordination. While there 
has been progress since the first UN I VAC, the 
pace of change in information technology, and 
the evolution of organizations as a result of 
its use, requires almost continuous attention 
to issues of planning, effective use, procure¬ 
ment, and policy leadership. Appendix 2A at 
the end of this chapter presents some excerpts 
from key studies in this area. 

Public Law 89-306 (known as the Brooks 
Act), enacted in 1965, was the earliest signifi¬ 
cant congressional action affecting Federal use 
of information technology. This legislation 
was prompted by a concern that one supplier 
(IBM) was dominating Federal automatic data 
processing, and by GAO reports that agency 
use of information technology was out of con¬ 
trol and that agencies should more often pur¬ 
chase rather than lease equipment. 4 ! n addi¬ 
tion, the Bureau of the Budget (BOB-now 
OMB) had issued reports and guidelines call¬ 
ing for coordination and "dynamic leadership" 
in government ADP management, but GAO 
and others considered BOB's actions to be 
generally ineffective. s Thus Congress, with the 

‘See U.S. General Accounting Office, Survey of Progress 
and Trend of Development and U se of Automatic Data Proc¬ 
essing in Business and Management Control Systems of the 
Federal Government as of December 1957, J une 27, 1958; Re¬ 
view of Automatic Data Processing Developments in the Fed¬ 
eral Government, Dec. 30, 1960; Study of Financial Advantages 
of Purchasing Over Leasing of Electronic Data Processing 
Equipment in the Federal Government, Mar. 6 , 1963; and Re¬ 
view of Problems Relating to Management and Administration 
of Electronic Data Processing Systems in theFederal Govern¬ 
ment, Apr. 30, 1964. 

'See Bureau of the Budget, "Report of Findings and Rec¬ 
ommendations Resulting From the Automatic Data Process¬ 
ing (ADP) Responsibilities Study, " September 1958 toj une 
1959, and "Report to the President on the Management of Auto¬ 
matic Data Processing in the Federal Government, "March 
1965. For views of BOB's effectiveness, see the legislative his¬ 
tory of Public Law 89-306, U.S. Congressional and Adminis¬ 
trative News, 89th Cong., 1st sess., pp. 3873-3874. 


leadership of Chairman Jack Brooks (D-Texas) 
and the House Committee on Government 
Operations, passed Public Law 89-306, which 
established central control over ADP in the 
Federal Government through three agencies: 
the Bureau of the Budget for policy, the Gen¬ 
eral Services Administration for procurement, 
and the Department of Commerce/National 
Bureau of Standards for standards and other 
technical support. 

In the late 1960s and early to mid-1970s, a 
variety of GAO reports and congressional 
oversight hearings focused on two topics rele¬ 
vant to information technology management: 
problems in the implementation of the Brooks 
Act, and concerns about excessive paperwork 
imposed by Federal agencies. Two important 
study groups were established to help grap¬ 
ple with these issues. In 1974, Congress estab¬ 
lished the Commission on Federal Paperwork, 
which reported recommendations on decreas¬ 
ing the paperwork burden in 1977; and in 1977, 
the President created the Federal Data Proc¬ 
essing Reorganization Project, which issued 
a report in April 1979. 6 Both of these reports 
cited the need for increased coordination of in¬ 
formation collection and use in the govern¬ 
ment, and advocated a more sophisticated, 
wide-ranging style of management for infor¬ 
mation technology. Building on these recom¬ 
mendations, Congress passed Public Law 96- 
511, the Paperwork Reduction Act of 1980. 
The act joins the two goals-reducing paper¬ 
work and improving information and technol¬ 
ogy management-under the banner of a new 
concept, information resources management 
(IRM). 

Information Resources Management 

The IRM concept is intended to change 
management practices in two fundamental 


'information Resources Management, Report of the Com¬ 
mission on Federal Paperwork, Oct. 3, 1977 (Washington, DC: 
U.S. Government Printing Office, 1977); and Information Tech¬ 
nology and Governmental Reorganization: Summary of theFed- 
eral Data Processing Reorganization Project, April 1979. 
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ways. 7 First, it brings together under one man¬ 
agement structure previously disparate func¬ 
tions—specifically ADP, telecommunications, 
office automation, systems development, data 
and records management, and in some cases, 
printing and libraries. The rationale behind 
this integration is to adopt a management 
strategy consistent with the convergence of 
the technologies themselves, as well as a strat¬ 
egy that allows for information functions to 
be more comprehensively integrated, efficient, 
and complementary. See figure 2-1 for a graphic 
representation of this integration. 

Second, IRM reorients the focus of informa¬ 
tion systems management from hardware and 
procedures to the information itself by firmly 
establishing the importance of information as 

'For useful, broad-ranging discussions of information re¬ 
sources management see the report of the Commission on Fed¬ 
eral Paperwork, op. cit.; and F. Woody Horton, J r„ and Donald 
Marchand(eds.),/n formation Management in Public Adminis¬ 
tration (Arlington, VA: Information Resources Press, 1982). 


a resource. Proponents of IRM believe this 
move is essential as organizations become 
more information-intensive, because managers 
must recognize the costs of collecting and 
keeping information, and they must balance 
those costs against the value of the informa¬ 
tion to the organization. One of the chief pro¬ 
ponents of the IRM concept writes: 

The time has come to formalize the treat¬ 
ment of information and deal with data as a 
manageable and budgetable resource, in the 
same way organizations must deal with human, 
physical, financial, and natural resources. 
Dealing with the information explosion piece¬ 
meal simply is not working. Information and 
data costs are increasing, and individuals and 
organizations are not getting the information 
they need. Instead, they are being inundated 
with data to the point where the data cease 
to be informative. Sophisticated information¬ 
handling technologies, including data base 
management approaches, are leading individ- 


Figure 2-1.— The Scope of Information Resources Management 



SOURCE Roger Cooley, U S Department of the Interiof 
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uals and organizations into a mire of infor¬ 
mation overload. 8 

In its paperwork-fighting role, the Paper¬ 
work Reduction Act mandates the establish¬ 
ment of a Federal Information Locator Sys¬ 
tem so that agencies can determine whether 
information they want to solicit from the pub¬ 
lic is already available; it also requires agen¬ 
cies to calculate the number of man-hours re¬ 
quired for the public to fill out its various 
forms, and to compile an "Information Collec¬ 
tion Budget" for approval by OMB. In its role 
as an information resources management di¬ 
rective, the act requires that agencies desig¬ 
nate a "senior official" to be responsible for 
IRM, and that agencies review and evaluate 
their information management activities. The 
act established a new Office of Information 
and Regulatory Affairs within OMB to man¬ 
age both paperwork reduction and information 
technology management governmentwide. 

One final important consequence of the Pa¬ 
perwork Reduction Act is its mandate for 
OMB and GSA to develop a "five-year plan 
for meeting the automatic data processing and 
telecommunications needs of the Federal Gov¬ 
ernment" (see ch. 3), and for OMB and GSA 
to review agencies' information management 
activities at least every 3 years. GSA has just 
begun to implement a plan for these reviews, 
and has developed materials to help agencies 
examine their own IRM activities as a first 
step toward a GSA/OM B evaluation. If effec¬ 
tive, these triennial reviews could help reveal 
weaknesses and help agencies to share good 
techniques. See table 2-1 for GSA's schedule 
for these reviews. 

Based on OTA's workshops and other con¬ 
tacts with Federal agency officials, it appears 
that many agency staff seem to view IRM in 
one of two ways: 

1. as an umbrella term, used in a wide vari¬ 
ety of discussions about ways to improve 

"F. Woody Horton, J r„ "Needed: A New Doctrine for I nfor- 
mation Resources Management," p. 45, in Horton and Mar- 
chand, op. cit. 

'General Services Administration, IRM ReviewHandbook, 
FIRMR 201-19, fiscal year 1985. The handbook contains a set 
of provocative questions for each aspect of an agency’s I RM 
activities that are particularly helpful in assessing information 
technology management practices. 


Table 2-1.—Schedule for GSA Triennial Reviews 


First-year agencies are those information-intensive agencies 
(identified by OMB in initial review efforts) with the longest 
established review programs. Second- and third-year agen¬ 
cies are information-intensive agencies not included in the 
first year. Agencies have been listed if they are large enough 
to have an established IRM organization. All other agencies 
are also included in the third year. 

Beginning in FY 86, and every third year thereafter 

Year 1 agencies: 

Department of Agriculture 

Department of Commerce 

Department of Education 

Department of Energy 

General Services Administration 

Department of Health and Human Services 

Department of the Interior 

Department of Justice 

Department of Labor 

Department of Transportation 

Veterans Administration 

Beginning in FY 87, and every third year thereafter 

Year 2 agencies: 

Consumer Product Safety Commission 

Environmental Protection Agency 

Federal Energy Regulatory Commission 

Federal Trade Commission 

Department of Housing and Urban Development 

Interstate Commerce Commission 

National Aeronautics and Space Administration 

National Science Foundation 

Office of Personnel Management 

Department of State 

Department of the Treasury 

Beginning in FY 88, and every third year thereafter 
Year 3 agencies: 

Action 

Commodity Futures Trading Commission 
Department of Defense 
Department of the Air Force 
Department of the Army 
Department of the Navy 
Federal Communications Commission 
Federal Emergency Management Agency 
Federal Reserve System 
Nuclear Regulatory Commission 
Securities and Exchange Commission 
Selective Service System 

SOURCE; General Services Administration, IRM Review Handbook 

use of information technology in govern¬ 
ment, in many cases similar to the way 
the term ADP (automatic data process¬ 
ing) is used; or 

2. as-an interesting and worthwhile concept, 
but much too broad to have substantial 
impact on down-to-earth problems. 0 


"This observation is based on OTA work sessions with sev¬ 
eral dozen executive agency officials on Oct. 25, Oct. 31, and 
Nov. 2,1984; several other OTA events that included exten- 
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On the other hand, to the extent that IRM 
serves as a vehicle for coordinating and ad¬ 
dressing those down-to-earth problems-es¬ 
sentially planning, procurement, personnel, 
and prestige within the agency—it is viewed 
as a useful organizational approach. As is 
probably true with any new (or relatively new) 
concept, as the concept moves from its guid¬ 
ing principles through the various stages of 
implementation, the broad philosophy becomes 
more and more distant. Too, agency staff must 
cope with the realities of resource constraints, 
bureaucratic inertia, and internal and exter¬ 
nal politics. Essentially, at the operating level 
agency staffers appear to draw from IRM con¬ 
cepts and techniques that which they find 
useful. It is unclear at this early stage of im¬ 
plementation whether this partial implemen¬ 
tation will continue to be the case, or whether 
IRM will eventually be implemented more 
completely throughout government. 

One of the difficulties in determining the ef¬ 
fectiveness of the I RM concept is the wide var¬ 
iation of problems, missions, and management 
styles in the Federal Government. As an OMB 
report notes: 

... It is critical to keep in mind, however, 
that information resources management is 
simply a means to perform agency missions 
and is not an end in and of itself. As such, 
its use varies across agencies. It is a tool that 
managers use to achieve objectives that often 
have little or nothing to do with information 
resources management. It is successful if it 
enables managers to achieve those objectives 
cost effectively and it is unsuccessful if it 
does not. " 


si ve Darticioation by executive agency Staff; OTA staff site 
visits to agencies; OTA staff attendance at professional meet¬ 
ings and seminars; and personal contacts. See also Robert Head, 
"IRM and Reality," Government Data Systems, May/J une, 
1984, pp. 45-46. 

"Office of Management and Budget, General Services 
Administration, and Department of Commerc^National Bureau 
of Standards, A Five-Year Plan for Meeting the Automatic Data 
Processing and Telecommunications Needs of the Federal Gov¬ 
ernment, J une 1985, p. 17. 


Planning 

The need for information technology plan¬ 
ning has been apparent almost since the gov¬ 
ernment began using information technology. 
For example, a 1960 GAO report, 

... call(ed) attention to the need for more posi¬ 
tive central planning of a long-range nature 
within the executive branch of the govern¬ 
ment to promote the maximum degree of effi¬ 
ciency, economy, and effectiveness in the 
administration and management of costly 
automatic data processing facilities, 'z 

The Paperwork Reduction Act of 1980, as 
noted above, requires OMB and GSA to de¬ 
velop a 5-year plan for Federal Government 
information technology. The act does not as¬ 
sign specific planning tasks to agencies them¬ 
selves, although it does include planning un¬ 
der the general rubric of the duties of the agen¬ 
cies' information resource managers. 

While the Federal Government has begun 
to address the need for planning for informa¬ 
tion systems, the private sector has been ac¬ 
tively pursuing such planning as well. Busi¬ 
nesses have also become more dependent on 
information technology, and information tech¬ 
nology management has gradually become 
more visible in corporate organizations. In 
fact, much of the business-oriented literature 
on information technology planning focuses on 
the use of computers not only to keep track 
of the business, but also to provide a competi¬ 
tive edge—for example, by enhancing the 
firm's flexibility and responsiveness, or by 
helping corporate executives focus only on in¬ 
formation that is critical for competitiveness. 13 

Despite what seems to have been a ground- 
swell of support for information technology 


"U.S. General Accounting Office, Review of Automatic Data 
Processing Developments in the Federal Government, Decem¬ 
ber 1960, p. 1. 

"see, for example, the work of the Center for I nformation 
Systems Research at the Sloan School of Management, Mas¬ 
sachusetts Institute of Technology. Highlights include, John 
Rockart, "Chief Executives DefineTheir Own Data Needs," 
Kar-vard Business Review, March-April 1979; J ohn Rockart and 
A.D. Crescenzi, "EngagingTop Management in Information 
Systems Planning and Development: A Case Study, " Paper # 
115 in the Center's working paper series, J uly 1984. 
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planning, there continues to be a consensus 
that most Federal agencies do not plan as 
much or as effectively as they should, and that 
this is partly responsible for many problems, 
and for their failure to use information sys¬ 
tems effectively. Clearly, this situation is also 
closely tied to weaknesses in many agencies' 
overall planning. 14 

I n the past few years, the demands for ef¬ 
fective planning for Federal information tech¬ 
nology seem to have reached a crescendo. The 
Office of Management and Budget, the Gen¬ 
eral Services Administration, and others have 
strengthened their policy guidelines and is¬ 
sued a variety of handbooks to help agencies 
plan effectively for information technology 
use. 15 (See ch. 3 for further discussion of infor¬ 
mation technology planning.) 

Procurement 

As noted above, the procurement process 
has been a subject of much controversy since 
the 1960s, and concerns about the way agen¬ 
cies acquired and managed their computers 
were the prime motivating force behind the 
Brooks Act of 1965. Since the act was passed, 
the Federal Government's strategies for ac¬ 
quiring and managing information technology 


'This consensus can be observed throughout congressional 
hearings and oversight, in many (perhaps most) GAO reports 
(e.g., Continued Use of Costly, Outmoded Computers in Fed¬ 
eral Agencies Can Be Avoided, Dec. 15, 1980; Inadequacies in 
Data Processing Planning in the Department of Commerce, 
May 1, 1978; Strong Centralized Management Needed in 
Computer-Based Information Systems, May 22, 1978; GSA 
Telecommunications Procurement Program Requires Compre¬ 
hensive Planning and Management, J une 11,1984), and in a 
variety of other fora (see, e.g., Robert Head, "Federal I nfor¬ 
mation Systems Management; Issues and New Directions, " a 
staff paper published by The Brookings Institution, 1982). 

*Tnese include volume 1 of OMB's Five-Year Plan for Meeting 
the Automatic Data Processing and Telecommunications Needs 
of the Federal Government, April 1984, which includes a primer 
on information technology planning and several examples of 
specific agencies' planning processes; OMB’s Bulletin 85-12 
(Mar. 29, 1985), which provides guidance to agencies on plan¬ 
ning and requires them to submit planning documentation to 
OMB; GAO'S Questions Designed To Aid Managers and Au¬ 
ditors in Assessing the ADP Planning Process, Sept. 30, 1982; 
and GSA's IRMReview Handbook, fiscal year 1985, and Stra¬ 
tegic I nformation Resources Management PlanningHandbook, 
February 1985. GSA has also begun a Federal IRM Planning 
Support Program to provide limited assistance to agencies in 
their planning process. 


have been in a state of near-constant flux. Con¬ 
gress, and especially the House Committee on 
Government Operations, has continued to ex¬ 
press concern, particularly about the use of 
noncompetitive or "sole source" procurement 
procedures to obtain information technology. 
A 1976 oversight report by the House Com¬ 
mittee on Government Operations concluded 
that noncompetitive procurements were caused 
largely by a lack of adequate justifications for 
ADP acquisition, inadequate long-range plan¬ 
ning, insufficient development and use of stand¬ 
ards and high-level languages, failure of agen¬ 
cies to use existing ADP resources efficiently, 
and the infrequent use of functional specifica¬ 
tions in procurement requests (rather than 
more restrictive technical specifications). 16 

Essentially, the key aspect of information 
technology that makes a fair and competitive 
procurement even more difficult than other 
procurements is the problem of compatibility 
between old and new systems. In most cases, 
new ADP technology will require modifica¬ 
tions in system configuration, telecommuni¬ 
cations, and especially software, that can 
become intricate, lengthy, and difficult to re¬ 
solve. Hence, beyond other considerations that 
may push Federal managers toward limiting 
competition in their procurements-e. g., com¬ 
plex procurement processes, inadequate plan¬ 
ning, personal preferences, or even corrup¬ 
tion-managers in both the public and private 
sectors tend to prefer new technology that is 
as compatible as possible with existing tech¬ 
nology to minimize disruption in the conver¬ 
sion process. 

In general, the level of frustration in imple¬ 
menting the Brooks Act has been high, not 
only for Congress, but also for the central man¬ 
agement agencies and the mission agencies. 
As one analyst observed: 

Each step in developing the law and pol¬ 
icy for ADP acquisition and management has 

been tested (by congressional staff, OMB, 

GSA, GAO, and by affected agencies) against 


"House Committee on Government Operations, Report 94- 
1746, Adm"m"stration of Public Law 89-306, Procurement of 
ADPResources by the Federal Government, Oct. 1, 1976, p. 3. 
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its assumed ability to produce the objectives 
sought. Each applicable policy document (e.g„ 
Public Law 89-306, GSA directives, NBS 
standards, and OMB circulars) has met the 
test of logic. Yet numerous GAO reports and 
congressional committee hearings support 
the conclusion that the end results have been 
astonishingly ineffective. In short, the law 
meets all rational tests and has not achia/ed 
the expected gains in economy and efficiency." 

I n 1984, in part as a result of some of these 
frustrations, Congress passed the Competition 
in Contracting Act. The act considerably 
strengthens the regulations governing all pro¬ 
curements, requires each agency to designate 
a "competition advocate, " and requires full 
and open competition in as many procure¬ 
ments as possible. Significantly, the new act 
considers both "competitive negotiation" and 
purchases from negotiated schedule contracts 18 
as full and open competition, allowing con¬ 
tracting officers some welcomed options in an 
otherwise stringent law. The act prescribes 
certain exceptions that justify noncompetitive 
procurements. These are: 

• the property or services are available from 
only one responsible source; 

• there is "unusual and compelling urgency"; 

• it is desirable to award the contract to a 
particular source in order to maintain the 
existence of a supplier or to meet the 
terms of an international agreement; 

• noncompetitive procurement is specifi¬ 
cally authorized by statute; 

• the disclosure of the agency's needs would 
compromise national security; and 

• the head of the agency determines that 
it is "necessary in the public interest" to 
use noncompetitive procedures, and noti- 


"Paul Richard Werling, Alternative Models of Organiza¬ 
tional Reality: TheCaseof Pubh"cLaw89-306, doctoral disser¬ 
tation for the University of Southern California, August 1983, 
p. 9. 

'“Competitive negotiation allows contracting officers to dis¬ 
cuss the terms and conditions of a contract with bidders, and 
to consider factors other than price in the award of the con¬ 
tract. It is in contrast to "sealed bids," in which there is gen¬ 
erally no discussion and the contract is awarded based on price 
alone. Purchases from "schedule contracts" are for lower dol¬ 
lar value items for which GSA has negotiated a government¬ 
wide price with the vendor. These vendors and prices are usu¬ 
ally found in GSA's ScheduleC. 


fies Congress in writing 30 days before 
award of the contract. 

In addition, the act sets up a special procedure 
to resolve disputes between agencies and ven¬ 
dors of ADP equipment. Under this procedure, 
the Board of Contract Appeals at GSA is 
given authority to suspend procurement au¬ 
thority if necessary, and to issue a decision on 
the protest within 45 working days after the 
protest is filed. 19 

The Competition in Contracting Act is also 
having a direct and immediate effect on GSA, 
where an effort is under way to rewrite the 
procurement regulations to conform with the 
act. In addition, GSA has been attempting for 
several years to simplify procurement proce¬ 
dures. For example, GSA recently combined 
its primary guidance on information technol¬ 
ogy procurement into a 100-page" document, 
the Federal Information Resources Manage¬ 
ment Regulation. Also, in recent modifications 
of procurement guidelines, GSA has continued 
a key trend to decentralize procurement au¬ 
thority to the agencies and try to minimize 
GSA's centralized procurement role. 

Agencies have blanket authority to procure 
ADP hardware without GSA approval when 
the cost is below certain thresholds (see table 
2-2). GSA evaluates the procurement practices 
of agencies and occasionally raises or lowers 
their thresholds for delegation of procurement 
authority, based on performance in executing 
effective procurements and maximizing com¬ 
petition. Finally, in late 1985, GSA announced 


'The act also provides for a general procurement protest 
system that can be used for all contracts, although vendors can¬ 
not protest using both systems. It is this more general protest 
system that has been so controversial since the act was passed. 
It gives the Comptroller General authority to decide protests 
(normally within 90 working days of filing). OMB and the At¬ 
torney General argued that giving the Comptroller General such 
authority was a violation of Constitutional separation of powers 
because GAO is an arm of the legislative branch. Attorney Gen¬ 
eral Meese initially instructed executive agencies not to com¬ 
ply with the act, but backed down after a U.S. District Court 
decision upheld the act, and a congressional committee voted 
to cut off procurement funds for the executive branch if they 
did not comply. The court decision is being appealed to the third 
U.S. Circuit Court of Appeals. (Myron Struck, "MeeseAverts 
Showdown on GAO Contract Power," Washington Post, J une 
5,1985.) 
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Table 2-2.—Thresholds Below Which Agencies May Procure Information Technology 
Without a Specific GSA Delegation of Procurement Authority (DPA) (FIRMR Part 201.23) 


Competitive 


Sole source 


Schedule 


ADPE .$2.5 million (purchase price) $250,000 (purchase price) $300,000 (purchase price) 

$1.0 million (annual rental) $100,000 (annual rental) (whether leased or purchased) 

Software.$1 million (total procurement) $100,000 (total procurement) Maximum order limitationa 

ADPE maintenance . . ..$1 million (annual charges) $100,000 (annual charges) Maximum order limitation' 


Commercial ADP 

services.$2 million (annual charges) $200,000 (annual charges) 


ADP support services . . —Authority is granted for all acquisition actions— 

avaries according to the particular contract Or product. 


$2 million (if competitive) 
$ 200,000 (if sole source) 


NOTE” DPA thresholds were Increased under FPR Temixxarv Regulation 71 to these levels and were permanently codified via FIRMR Amendment 4, effective Oct. 1, 1985 
ADPE = Automatic Data Processing Equipment 


SOURCE General Services Administration. 


a new program, "Gofor 12, "whose goal is to 
help other agencies get computers delivered 
within 12 months after budget approval. GSA 
is developing the details of the program in co¬ 
operation with selected Federal agencies. 20 

Agencies can now obtain small computer 
systems with virtually no restrictions except 
normal internal review of purchases. The pro¬ 
cedures for acquiring equipment costing less 
than $25,000 have been streamlined. And 
GSA has opened two new routes for purchase 
of such smaller systems: a retail store oper¬ 
ated under contract (Office Technology Plus), 
and a centrally negotiated "schedule" of prices 
with a wide range of vendors. Responding to 
concerns about relatively uncontrolled pur¬ 
chase of personal computers, GSA has also is¬ 
sued some (nonbinding) guidance to agencies 
on such procurements. 21 

OM B has also made significant changes in 
guidance regarding information technology 
procurement. In a report submitted with the 
fiscal year 1986 budget, OMB required agen¬ 
cies to document a 10 percent return on their 
information technology investments, imple¬ 
ment standards permitting communication be 
tween systems, encourage the procurement of 
commercially available software instead of 
custom-written software, and reduce their 
software maintenance costs by 25 percent, and 


'"General Services Administration, "Draft ExecutiveSum- 
mary of the Go For 12 Program, "February 1986. 

2 ‘,Managing End User Computing in the Federal Govern¬ 
ment, J unel983; and EndUser'sGuidetoBuyingSmall Com¬ 
puters, August 1984. 


by 5,000 FTEs, over fiscal years 1986 to 1988. 22 
Though the effectiveness of these measures 
remains to be seen, the refocusing of some at¬ 
tention to software, rather than hardware, ap¬ 
pears well advised. As OMB noted in its re¬ 
port, software costs amounted to less than 20 
percent of Federal computer expenditures in 
1965, but represent 60 percent of expenditures 
today. Yet, the government still develops cus¬ 
tom software for 90 percent of its applications, 
which results in redundancy of software de¬ 
velopment projects, difficulties in system con¬ 
versions and upgrades, and added expense. 
However, in some cases the nature and size 
of Federal applications may require custom 
software. For example, while "off-the-shelf" 
software is likely to be useful for common 
administrative applications such as budgeting 
or personnel management, it is less likely to 
be useful for management of immense data¬ 
bases (e.g., Social Security Administration or 
I nternal Revenue Service). 

The Federal Government's information tech¬ 
nology managers have been arguing for at 
least a decade that the procurement process 
is hopelessly complex and is blocking attempts 
to use information technology effectively and 
innovatively .23 As far as OTA can discern, this 
group is just as vehement on this point as 


"OMB, Management of the United States Government, 
Fiscal Year 1986. 

"See, for example, Robert Head, Federal Information Sys¬ 
tems Management: issues and Ne/v Directions, op. cit. 
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ever. 24 Nevertheless, a small and perhaps 
growing group of officials say that with some 
resourcefulness it is indeed possible to get 
through the apparent maze of processes and 
regulations and conduct successful and com¬ 
petitive procurements. 25 

In its December 1985 Policy Circular, "Man¬ 
agement of Federal Information Resources" 
(discussed in more detail below), OMB's en¬ 
dorsement of competitive procurement is less 
wholehearted than that of Congress. An ap¬ 
pendix to the circular states: 

While competitive procurement is general¬ 
ly to be valued, its costs should be taken into 
account, including the cost to program effec¬ 
tiveness of unnecessarily lengthy procure¬ 
ment processes. Other conditions, such as the 
need for compatibility, may also be legitimate 
limitations on the competitive process." 

Federal managers would support this state¬ 
ment and, indeed, the lifecycle costs of infor¬ 
mation systems to the government include the 
costs of procurement. However, the spirit of 
this statement reflects the divergence in views 
between Federal managers, who would prefer 
to err on the side of effectiveness even if that 
means less competition, and congressional 
oversight committees such as House Govern¬ 
ment Operations, whose preference (expressed 
both in legislation and in hearings) has been 
for competitive procurements in the absence 
of extremely compelling circumstances indi¬ 
cating otherwise. 

Other recent administrative changes in the 
process also seem to be pulling procurement 
in different directions. GSA is attempting to 
give agencies greater autonomy in procure¬ 
ments and simplify the regulations, while at 
the same time OMB is requiring demonstrated 

'The impression that Federal managers' dissatisfaction with 
the procurement process has not eased significantly comes from 
OTA's meetings with Federal agency representatives, Oct. 25, 
Oct. 31, and Nov. 2, 1984; and from a variety of conferences 
and other personal contacts. 

""See, for example, Frank Guglielmo, Acting Director, Com¬ 
puter Technology and Telecommunications Staff, Office of In¬ 
formation Technology, Department of J ustice, "Streamlining 
Acquisition, " address to Government Computer Expo, Wash¬ 
ington, DC, J une 13, 1985. 

"’OMB Circular A-130, p. IV-13. 


returns on investment. Most executive branch 
officials seem to seethe Competition in Con¬ 
tracting Act as likely to lengthen and compli¬ 
cate many procurements, because of the ease 
with which vendors can file protests and de¬ 
lay the process, and because it is unclear un¬ 
der the new law to what extent agencies can 
conduct "compatibility-limited' procurements 
(that is, requiring that vendors' proposals only 
include products compatible with a certain 
kind of system or architecture) and still be con¬ 
sidered fully competitive. 27 

Yet, many of the delays in procurement 
processes may be due to procedures within the 
agencies, as well as to regulations imposed on 
the agencies by GSA, OMB, or Congress. One 
participant at an OTA meeting, for example, 
said that he had been trying to procure 40,000 
feet of coaxial cable-presumably a simpler 
procurement than, for example, a large com¬ 
puter system—and that after 15 months it was 
still not clear when the paperwork would clear 
his internal bureaucracy. Experienced observers 
of Federal procurement report that procure¬ 
ment offices are frequently understaffed and 
besieged by changes in regulations and in tech¬ 
nology. In addition, the procurement officers 
themselves often believe that delay is desira¬ 
ble, either because the time may allow a bet¬ 
ter deal for the government, or because their 
jobs make them exceptionally vulnerable to 
criticism for a mistake in procurement proce¬ 
dures. 28 

A 1981 study on acquisition of ADP equip¬ 
ment for the Air Force may be somewhat in¬ 
dicative of the problems in government ADP 
procurement, although the Defense Depart¬ 
ment has many more layers of hierarchy than 
other, smaller agencies. The report's findings 
indicated that the procurement process is un¬ 
necessarily lengthy (the Air Force takes an 
average of three times as long as industry to 
procure ADP equipment, according to the re¬ 
port), resulting in sacrifices in acquisition cost 
and capabilities; and that the agency was fo- 


"Francis McDonough, General Services Administration, 
letter to OTA, September 1985. 

"OTA work session on information technology manage¬ 
ment, planning, and procurement, J une 26, 1985. 
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cusing on a misplaced notion of short-term 
economy and efficiency (i.e., spending the least 
money to purchase the machine) at the ex¬ 
pense of achieving its mission effectively .29 

ADP Personnel 

The availability of staff to manage and oper¬ 
ate Federal information technology is another 
ongoing problem in Federal information tech¬ 
nology management. Although there is a wide 
spread perception among Federal managers 
that the government cannot compete effec¬ 
tively in hiring and retaining computer staff, 30 
there is only sketchy and largely anecdotal evi¬ 
dence to support this assertion and identify 
the magnitude of the problem. Further, agency 
personnel problems differ greatly because of 
variations in management and personnel prac¬ 
tices, and in levels of sophistication in infor¬ 
mation technology use. 

The perceptions of potential employees can 
be a significant factor in attracting them to 
an agency. For example, the extent to which 
an agency uses state-of-the-art technology is 
an important attraction for ADP staff, and 
some agencies, such as the National Aeronau¬ 
tics and Space Administration (NASA), report 
that their image as a leader in technology con¬ 
tinues to help them attract good technical 
staff. 31 In other cases, reports of budget cuts 
or hiring freezes, in addition to a perception 
that many Federal agencies use obsolete ADP 
equipment (a perception that may be increas¬ 
ingly inaccurate, as noted below), tend to make 
recruiting and retention more difficult. 

One of the key arguments is that computer 
specialists can command higher salaries in the 
private sector, and thus are not attracted to 
lower paying jobs in the Federal Government. 

29 Booz-Allen & Hamilton, Inc., Defense ADP Acquisition 
Study, prepared for U.S. Air Force ADP Acquisition Improve¬ 
ment Group and Defense Systems Management College, Nov. 
30,1981. 

“See, for example, President's Private Sector Survey on 
Cost Control (known as the Grace Commission), Report on Auto 
mated Data Processing/Office Automation, spring-fall 1983, pp. 
85-103; and S.M.Menke, "Budget Blues: Agencies Losing AD- 
Pers, " Government Computer News, Mar. 8,1985, p. 1. 

"Charles Mason, National Aeronautics and Space Adminis¬ 
tration, personal communication, J anuary 1986. 


An Office of Personnel Management (OPM) 
study provides some support for this argu¬ 
ment, indicating that pay differences are 
greatest at entry level, where Federal GS-5 
salaries are 24.2 percent below those in the pri¬ 
vate sector. This difference drops to 12.3 per¬ 
cent at GS-12 (see table 2-3). 32 While the Fed¬ 
eral Government is by law supposed to pay 
its employees salaries comparable to average 
salaries in the private sector, the pay increases 
in the last few years have lagged behind the 
government's analysis of what is necessary to 
maintain comparability. 

Further, comparisons between Federal and 
private sector pay are not entirely straightfor¬ 
ward because of differences in position defi¬ 
nitions, fringe benefits, and regional costs of 
living. 33 Other indicators do support pay-re¬ 
lated personnel problems in this area, however. 
A study conducted by the Dallas region of 
OPM indicated that: 

• GS-334 (the designation for Federal com¬ 
puter jobs; see footnote 32) positions have 
a higher vacancy rate than other com¬ 
parable government jobs in the region (8.4 
v. 5.5 percent as of April 1984); 

• positions at the GS-5, GS-7, and GS-14 
levels have even higher vacancy rates 
(23.1, 14.5, and 13.2 percent, respectively); 

• GS-334 jobs take longer to fill than com¬ 
parable jobs (a median of 83 days vacant 
v. 60 for other jobs); and 

• turnover rates are particularly high at the 
GS-5, GS-7, and GS-14 levels. 34 


"Office of Personnel Management, Computer Specialist 
(GS- 334) Classification Study: Agency Compliance and Evalu¬ 
ation, February 1984. To the extent that there is information 
available about Federal ADP personnel, it tends to focus on 
the GS-334 series, which includes programmers, programmer 
analysts, systems programmers, systems analysts, equipment 
analysts, and computer specialists. There is considerably less 
information available about computer scientists, or other Fed¬ 
eral technical staff who work with computers but whose clas¬ 
sification is not strictly computer-related. 

"GraceCommission, op. cit. 

"Dallas Region, Office of Personnel Management, "Report 
of Regional Probe: Recruitment and Retention of Computer 
Specialists, " August 1984. 
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Table 2.3.—Average Annual Salaries for Programmers/Programmer Analysts in Private Industry v. 
Average Annual Salaries for Federal Employees in the GS-334 Series, March 1983 


BLS 

level 

GS 

grade 

BLS a 

average 

Federal 13 

average 

Difference 
Federal v. BLS 

_ 1983 

Minimum 

range _ 

Maximum 

1984 GS range 
Minimum Maximum 


5 

19,777 

14,998 

-24.20/O 

13,369 

17,383 

13,837 

17,986 

II :::::: 

:: 7 

22,148 

17,640 

-20.40/O 

16,559 

21,527 

17,138 

22,277 

III. 

9 

26.224 

21.553 

-17.8AO 

20,256 

26,331 

20,965 

27,256 

Iv. 

. ... 11 

31,446 

27,155 

-13.60/O 

24,508 

31,861 

25,366 

32,980 

V. 

12 

38,125 

33,448 

-12.30/O 

29,374 

38,185 

30,402 

39,519 


SOURCES Off Ice of Personnel Management, using data from 

a National Survey of professional, Administrative, Technical, and Clerical Pay, March 1983 (BLS Bulletin 2181 dated September 1983) 
bpATCO Report, March 1983 (OPM. Off Ice of Workforce Information) 


Virtually all of the data on ADP personnel are 
preliminary or based on limited samples. Un¬ 
til more authoritative studies are done, it is 
difficult to assess the magnitude of the prob¬ 
lem and determine appropriate policy steps. 35 

A final issue in assessing ADP personnel is 
the classification system used by the Federal 
Government to assign jobs to position levels 
based on the responsibilities and skills needed 
i n the j ob. P rel i mi nary fi ndi ngs from a study 
begun by OPM show that 28.5 percent of Fed¬ 
eral employees in the GS-334 series are over- 
grazed (that is, their grades are higher than 
their responsibilities and skills indicate). In the 
civilian agencies, this figure rose to 44.7 per¬ 
cent. By comparison, a 1981 study found an 
overgrading rate of 14.3 percent in white-collar 
government jobs as a whole. 36 lt is not clear 
to what extent overgrading is a result of 
agency attempts to make pay more competi¬ 
tive, or other factors such as inappropriate use 
of the classification schemes. In any case, the 
classification system—and in particular, the 
Federal practice of reclassifying most posi¬ 
tions when they fall vacant—can exacerbate 
other recruitment problems because it can ex¬ 
tend the time necessary to fill a position. 

A variety of solutions have been tried or pro¬ 
posed to ease ADP personnel problems. One 
agency, for example, provides a training pro¬ 
gram. for persons hired in the GS-334 series. 
The program recruits graduates with advanced 


'The Office of Personnel Management has been working on 
a more authoritative and indepth study of ADP personnel, but 
completion and release of the report are indefinite. (Tony In- 
grassia,OPM, personal communication, J anuary 1986.) 

“OPM .Computer Specialist Classification Study, op. cit. 


degrees, little computer experience, and good 
academic records to enter a 2- to 3-year pro¬ 
gram. As they are being trained to become 
computer specialists, they are able to enjoy 
pay raises and prove themselves in the field. 
The disadvantages of this training program 
are that it is expensive, not all recruits become 
skilled in the use of computers, and some may 
leave the government after training. 37 

The Federal Employees Recruitment and 
Retention Improvements Act of 1985 (H.R. 
2836, sponsored by Representative Frank 
Wolf, and S. 1327, sponsored by Senator Paul 
Trible) has been proposed to exempt computer 
specialists from pay freezes in order to retain 
employees in computer-related fields, and to 
reduce the lag between the time a position be¬ 
comes available and the time a candidate is 
approved by QPM for hire. Another draft bill 
circulating within OPM and the Office of 
Science and Technology Policy, the Federal 
Science and Technology Revitalization Act, is 
said to propose allowing public sector wages 
to match those of the private sector, and to 
provide for merit raises and the abolishment 
of automatic raises in enumerated science and 
technology jobs. 33 

Finally, the Grace Commission's report sug¬ 
gested that: 

• OPM and GSA should collaborate on 


"Carl Lowe, Bureau of Labor Statistics, personal communi¬ 
cation, J anuary 1986. 

“EricFredell, "ADPer Shortage a Myth? Some May Es¬ 
cape F reeze, " Government Computer News, Oct. 11, 1985, p. 
1; and EricFredell, "Reagan Eyes Higher Tech Pay: Bill De¬ 
signed to Support Recruitment, Retention, " Government Com¬ 
puter Nans, February 1985, p. 1. 
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ways to streamline the classification 
system; 

• agencies should find ways to speed the 
hiring cycle, for example by reclassifying 
positions on a fixed schedule instead of 
when vacated; 

• the government should investigate ways 
to make the classification system more 
flexible; and 

• the agencies should increase the use of 
cash incentives to reward performance for 
ADP personnel. 

GAO concurred with the essence of these rec¬ 
ommendations. 39 

Recent I ssues 

Since the Paperwork Reduction Act was 
passed, debate and controversy continue 
around the issues of information technology 
management: 

• The Senate Governmental Affairs Com¬ 

mittee and the House Government Oper¬ 
ations Committee have held hearings on 
progress in implementing the Paperwork 
Reduction Act, and both Representative 
J ack Brooks and Senator J ohn Danforth 
introduced amendments to the act in the 
98th Congress that specified further pa¬ 
perwork reductions and clarify and en¬ 
hance other portions of the act. 40 !he 
amendments passed the full House and 
the Senate Governmental Affairs Com¬ 
mittee, but were not taken up i n the ful I 
Senate. As of J anuary 1986, similar leg¬ 
islation had not been introduced in the 
99th Congress, although Senator Dale 

"Grace Commission, op. cit.; and General Accounting Of¬ 
fice, Compendium of GAO’s Views on the Cost Savings 
Proposals of the Grace Commission, F eb. 19, 1985, p. 1024. 

'"U.S. Senate, Subcommittee on Information Management 
and Regulatory Affairs, hearings on the Paperwork Reduction 
Act Amendments of 1984, Apr. 4, 1984; U.S. Senate, Commit¬ 
tee on Governmental Affairs, Report 98-576 to accompany S. 
2433, the Paperwork Reduction Act Amendments of 1984; 
House Committee on Government Operations, Subcommittee 
on Government Information, hearings on the Paperwork Re¬ 
duction Act Amendments of 1983 (H.R. 2718), Apr. 27, 1983. 
In the 99th Congress, the Senate Governmental Affairs Sub¬ 
committee on Intergovernmental Relations also held hearings 
on implementation of the Paperwork Reduction Act, J an. 28, 
1986. 


Bumpers has proposed an amendment to 
the Paperwork Reduction Act that would 
further reduce the paperwork burden on 
small businesses. 

• The President's Private Sector Survey on 
Cost Control, also known as the Grace 
Commission, issued a report calling for a 
variety of changes in Federal ADP man¬ 
agement, including steps that would en¬ 
hance central leadership of information 
technology use, and steps that would pro¬ 
vide more autonomy for agencies in their 
use of ADP. 41 

• The General Accounting Office has evalu¬ 
ated progress in implementing the Paper¬ 
work Reduction Act, noting that although 
OMB has reportedly achieved the paper¬ 
work reduction goals, many other aspects 
of the act still need a great deal of atten¬ 
tion. 42 

Recent OMB Activities 

Much of OMB'S activity in the first few 
years of implementation of the Paperwork Re¬ 
duction Act has concerned establishment and 
clarification of paperwork reduction proce¬ 
dures. In the area of information and technol¬ 
ogy management more broadly, there are two 
significant sets of actions that OMB has re¬ 
cently undertaken. First, OMB has begun to 
set guidelines and incentives for agencies to 
conduct long-range planning. These topics are 
discussed in more detail in chapter 3. Second, 
in December 1985, OMB issued a circular, 
"Management of Federal Information Re¬ 
sources, which supersedes several other cir¬ 
culars and essentially provides guidance for 
agencies in adopting the IRM approach man¬ 
dated by the Paperwork Reduction Act. It is 
essentially OMB'S first major attempt to take 
a leadership role in IRM policy. 


"President's Private Sector Survey on Cost Control, Report 
on Automated Data Processing/Office Automation, spring-fall 
1983. 

‘implementing the Paperwork Reduction Act: Some Prog¬ 
ress, But Many Problems Remain, GGD 83-85, Apr. 20, 1983. 
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Table 2-4.—Excerpts From OMB Circular A-130 on 
Information Technology Management 


Information systems and information technology 
management 

Agencies shall: 

1. Establish multiyear strategic planning processes for ac¬ 
quiring and operating information technology that meet 
program and mission needs, reflect budget constraints, 
and form the bases for their budget requests. 

2 . Establish systems of management control that document 
the requirements that each major information system is 
intended to serve; and provide for periodic review of those 
requirements over the life of the system in order to deter¬ 
mine whether the requirements continue to exist and the 
system continues to meet the purposes for which it was 
developed. 

3 . Make the official whose program and information system 
supports responsible and accountable for the products 
of that system. 

4 . Meet information processing needs through interagency 
sharing and from commercial sources, when it is cost- 
effective, before acquiring new information processing ca¬ 
pacity. 

5. Share available information processing capacity wit h other 
agencies to the extent practicable and legally permissible. 

6 . Acquire information technology in a competitive manner 
that minimizes total lifecycle costs. 

7 . Ensure that existing and planned major information sys¬ 
tems do not unnecessarily y duplicate information systems 
available from other agencies or from the private sector. 

8 . Acquire off-the-shelf software from commercial sources, 
unless the cost-effectiveness of developing custom soft¬ 
ware is clear and has been documented. 

9. Acquire or develop information systems in a manner that 
facilitates necessary compatibility. 

10. Assure that information systems operate effectively and 
accurately. 

11. Establish a level of security for all agency information sys¬ 
tems commensurate with the sensitivity of the informa¬ 
tion and the risk and magnitude of loss or harm that could 
result from improper operation of the information systems. 

12. Assure that only authorized personnel have access to in¬ 
formation systems. 

13. Plan to provide information systems with reasonable con¬ 
tinuity of support should their normal operations be dis¬ 
rupted in an emergency, 

14. Use Federal Information Processing and Telecommuni¬ 
cations Standards except where it can be demonstrated 
that the costs of using a standard exceed the benefit or 
the standard will impede the agency in accomplishing its 
mission. 

15. Not require program managers to use specific informa- 
t ion technology facilities or services unless it is clear and 
is convincingly documented, subject to periodic review, 
that such use is the most cost-effective method for meet¬ 
ing program requirements. 

16. Account for the full costs of operating information tech¬ 
nology facilities and recover such costs from government 
users. 

17. Not prescribe Federal information system requirements 
that unduly restrict the prerogatives of heads of State and 
local government units. 

18. Seek opportunities to improve the operation of government 
programs or to realize savings fort he government and t he 
public through the application of up-to-date information 
technology to government information activities. 

SOURCE Office of Management and Budget, “Management of Federal In forma, 
tion Resources, ” OMB Circular A-130, Dec 12, 1985, Sec 8b 


Table 2-4 displays some of the key points 
of the circular that affect information technol¬ 
ogy management. Essentially, it sets forth in 
one place a collection of extremely desirable 
goals for Federal information technology man¬ 
agement. According to the circular, agencies 
should, for example, use strategic planning, 
procure information systems in a timely fash¬ 
ion (with the assistance of GSA), control and 
review major information systems, share re¬ 
sources with other agencies, not duplicate soft¬ 
ware or resources available commercially, and 
operate information systems effectively and 
securely. The fact that these goals are all 
stated clearly and in one place is an accom¬ 
plishment; however, few of these goals repre¬ 
sent significant changes from previous OM B 
and congressional policies, and in only a few 
cases does the circular provide enough detail 
to be of substantial help to agencies in achiev¬ 
ing the goals. 43 Thus, while the circular is a key 
organizing document for policy, it was in¬ 
tended to be a very general policy statement 
and thus does not, in itself, make much prog¬ 
ress in addressing problems of information 
technology management. 


'The only areas that are treated in some detail in the circu¬ 
lar are dissemination of information, which is discussed inch. 
7 of this report; the treatment of records about individuals, 
which isdiscussed in OTA report on Electronic Record Sys¬ 
tems and Individual Privacy (forthcoming); and to a lesser ex¬ 
tent, information systems security, which isdiscussed in ch. 
4 of this report. 
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BASIC DATA ON FEDERAL INFORMATION TECHNOLOGY USE 


Total Expenditures 

As noted in figure 2-2, OMB expects expend¬ 
itures for information technology to rise from 
$9.1 billion in fiscal year 1982 to $15.2 billion 
in fiscal year 1986. This amounts to a 17 per¬ 
cent annual growth rate between fiscal years 
1982 and 1985, and a 4 percent growth be¬ 
tween fiscal years 1985 and 1986; adjusted for 
inflation, the growth rate for fiscal years 1982 
to 1985 is 13 percent annually, while fiscal 
years 1985 to 1986 is constant after inflation. 44 
A growth rate higher than general government 
spending is expected to continue, despite 
austerity measures throughout government. 
As shown in table 2-5, an I nternational Data 
Corp. forecast expects sales to the Federal 
Government to reach $23.8 billion per year by 
1988.“Although the Gramm-Rudman-Hollings 


"OM B, GSA, and Commerc^N BS, A Five-Year Plan for 
Meeting the Automatic Data Processing and Telecommunica¬ 
tions Needs of the Federal Government, J une 1985. 

'TheOMBand IDC numbers are only roughly comparable 
due to differences in data sources and definitions. IDC, "Fed¬ 
eral Market Spending Analysis, 1983 -88," J une 1984. 


Figure 2“2.—Information Technology Obligations in 
Current and Constant Dollars 



SOURCE: Office of Management and Budget, General Services Administration, 
and the Department ofcommerce/Nationai Bureau of Standards ,n 

Five-Yea Plan for Meeting the A DP and Telecommunications Needs 
of the Federal Government, June 1985 


deficit reduction measures are sure to affect 
spending for information technology, the mag¬ 
nitude of those effects is difficult to foresee. 
Determining the fiscal year 1987 budget for 
information technology requires a cross-agen¬ 
cy analysis that OMB will not release until 
spring 1986. Nevertheless, OMB staff expect 
that cuts in information technology budgets 
will not be as severe as cuts in other areas, 
because of the labor-saving and efficiency-in¬ 
creasing capabilities of the technology. 46 

The scope and accuracy of these data should 
be viewed with some caveats. The numbers are 
provided to OMB in agencies' annual budget 
submissions, and they exclude computers and 
telecommunications used, for example, in clas¬ 
sified activities, in weapons systems, in space 
exploration systems, or in the legislative or ju¬ 
dicial branch. In addition, GAO has criticized 
the agencies for being unable to adequately 
break out and analyze computer and telecom¬ 
munication costs. 47 GAO officials estimate 
that the actual level of Federal expenditure for 
information technology is approximately twice 
that reflected in the OMB figures, or roughly 
$30 billion in fiscal year 1986. 4S A further con¬ 
sideration is that, as agencies have grown 
more sophisticated in identifying costs, they 
have included more items not captured in pre¬ 
vious years, particularly in office automation 
and telecommunications. Thus, according to 
GSA, the growth rates for information tech¬ 
nology expenditures in OMB's figures are de¬ 
ceptively large because the agencies are now 
including items that they did not include pre¬ 
viously. 49 


"J ohn McNicholas,OMB, personal communication, Febru¬ 
ary 1986. Also see, e.g., Grace Commission, op. cit.; Ellen Law, 
'Wright: 'Big Bucks'To Be I nvested in ADP, "Government 
Computer News, Mar. 8, 1985. 

"U.S. General Accounting Office, Accounting for Automatic 
Data Processing Costs Needs I mprovement, FGM5D-78-14, 
Feb. 7, 1978. 

"Walter Anderson, GAO, interview with OTA staff, Sep¬ 
tember 1985. 

"GSA letter to OTA, September 1985. 
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Table 2-5.—I DC Projections of Information Technology Sales to the Government 


Section 


Sales 

(hundreds of 

thousands of 

dollars) 

Actual 

1983 

Part of 
total 

Projected 

1988 

Part of 
total 

1 

ADP equipment rental and purchase. 

$2,282 

1770 

$4,046 

1770 

2 

ADP services. 

1,795 

13 70 

3,392 

1470 



$4,077 

30 70 

$ 7,438 

31 ’70 

3 

Communication equipment rental and purchase. 

1,861 

14 70 

3,117 

1370 

4 

Telephone utilities. 

1,800 

13 70 

2,300 

10 70 

5 

Telephone communication services (maintenance, 






technical repair FM). 

1,150 

80/0 

2,025 

80/0 

6 

R&D electrical and communications. 

3,832 

280/O 

7,707 

320/O 


R&D space tracking and data acquisition. 

171 

10/0 

208 

1% 



$8,814 

640/0 

$15,357 

640/0 

7 

Office equipment. 

127 


109 


8 

Office services. 

42 


60 




$ 169 

1 % 

$ 169 

1% 

9 

Electric and electronic instrument purchase. 

591 


754 



Electric and electronic instrument maintenance. 

101 


123 




692 

5% 

877 

4% 


Total. 

$13,752“ 

100 70 

$23,841 “ 

100 70 


a Excludes Facility Management (primarily Department of Energy) of $85 billion 


SOURCE International Data Corp , “Federal Market Spending Analysis, 1983-88 


Medium- and Large-Scale Computers 

GSA reported 18,183 computer central proc¬ 
essing units (CPUS) in its revised inventory 
as of the second quarter of fiscal year 1985. 
The new inventory contains only computer 
equipment costing more than $50,000, or with 
a monthly rental exceeding $1,667. Seventy- 
nine percent of the CPUs are owned by the 
Federal Government, and the remainder are 
I eased. 50 Figure 2-3 presents the distribution 
of dollar value of equipment (that is, all com¬ 
ponents, including not just CPUS but disk 
drives, peripherals, etc., that fall above the 
reporting threshold) by agency. Note that 
roughly 45 percent of the total is in Depart¬ 
ment of Defense agencies. OMB has estimated 
that there will be 25,000 mainframe systems 
in the government by 1990. 51 

'"’General Services Administration, Automatic Data Proc¬ 
essing Equipment in the U.5. Government: First and Second 
Quarter 1985 Summary. GSA's earl ier inventory of ADP equip- 
ment regardless of cost had a count of 20,011 CPUs at the end 
of fiscal year 1983. However, because of data reliability prob¬ 
lems in the system, and the paperwork burden on agencies of 
reporting low dollar-value systems, GSA developed the new sys¬ 
tem and instituted the $50,000 threshold, 

"J oseph Wright, Deputy Director, OMB, testimony to Sen¬ 
ate Governmental Affairs Subcommittee on Oversight of Gov¬ 
ernment Management, hearings on "Computer Security in the 
Federal Government and the Private Sector, "Oct. 25-26,1983, 
p. 52. 


Data from OTA’s Federal Agency Data Re¬ 
quest strongly support the hypothesis of rapid 
growth of computer use in government. Of the 
142 agency components polled by OTA, 52 fig¬ 
ures 2-4 and 2-5 show that the number of main¬ 
frame CPUs 53 has more than doubled, from 
11,300 in 1980 to 26,700 in 1985, and the num¬ 
ber of terminals has increased more than four¬ 
fold, from 36,400 in 1980 to over 170,000 in 
1985. Defense, Treasury, and NASA account 
for almost the entire gain in number of CPUs. 
However, a better indicator of the pervasive¬ 
ness of information technology may be the 
number of terminals, in which almost every 
agency showed dramatic increases between 
1980 and 1985. 

Microcomputers 

Tracking mechanisms are just beginning to 
catch up to the microcomputer's relatively 
sudden penetration into the Federal Govern- 

“OTA’s data request was sent to all major units of the cab¬ 
inet level agencies plus 20 selected independent agencies. Each 
sub-cabinet agency's response, along with the 20 independent 
agencies, is counted as a separate response in calculating the 
total of 142. See app. B for a list of agencies responding. 

"There were some differences in agencies'interpretation of 
the wording of OTA’s data request. Some agencies included 
minicomputers in their tally of mainframe CPUs, while others 
did not. 
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Figure 2-3.—Distribution of ADPE Dollar Value by 
Reporting Agency 


Total ADPE dollar value (in thousands of dollars): $7,541,237.6 



Army 

$726,597.6 

9.60/. 


T 

USDA 
$581,740.8 
7.7 70 


Treasury 

$117,342.9 

1.60/0 

DLA 

$122,624.9 

1,60/0 


DO I 

$254,501.4 

3.40/0 


KEY: 

NASA - National Aeronautics and Space Administration 

DOE - Department of Energy 

Army - Department of the Army 

USDA - Department of Agriculture 

DOI - Department of the Interior 

DLA - Defense Logistics Agency 

Treasury - Department of the Treasury 

DHHS - Department of Health and Human Services 

SOURCE: General Services Administrationflufomat/c LX?ta Processing Equip¬ 
ment in the u.s. Government, First and Second Quarter FY 19S5 
Summary. 


has also begun to conduct annual surveys of 
agency purchases of computers costing less 
than $10,000. The first survey reported that 
7,908 systems costing less than $10,000 were 
purchased in fiscal year 1983 (excluding NASA); 
GSA staff considered this number to be low 
by a factor of three to five times or more. The 
second survey showed 37,277 units bought in 
fiscal year 1984, for a total expenditure of 
$137.2 millions' (see table 2-6). 

In response to OTA'S Federal Agency Data 
Request, agencies reported an increase from 
2,307 microcomputers in 1980 to about 100,000 
in 1985 (see figure 2-6). Defense was again the 
largest user with 44 percent of the total re¬ 
ported, but all agencies reported large increases. 
In many agencies (i.e., Departments of Agri¬ 
culture, Commerce, Health and Human Serv¬ 
ices, Interior, Justice, Transportation, Treas¬ 
ury; the Environmental Protection Agency; 
GSA; NASA; and the Veterans Administra¬ 
tion), literally thousands of new machines are 
being installed compared to almost none 5 
years ago—a phenomenal rate of change for 
the Federal Government that has important 
implications for management. 

In particular, the microcomputer explosion 
means that agencies must cope with decentral¬ 
ization of information manipulation capabil- 

'"GSA reports: "U.S. General Services Administration Sur¬ 
vey of Fiscal 1983 Purchases of Small Computers by FederaJ 
Agencies, "J anuary 1984; "Survey of Small Computers Bought 
by Government in Fiscal 1984,”J anuary 1985. 


Table 2%.—Purchase of Small Computers by 
Federal Agencies, Fiscal Year 1984 


ment. Although there is no authoritative count 
of the number of microcomputers in govern¬ 
ment, a 1983 GSA report makes a very rough 
estimate of 82,000 word processors and as 
many as 210,000 personal computers. 54 GSA 


"U.S. General Services Administration, Office of I nforma- 
tion Resources Management, Managing End User Computing 
in the Federal Government, J une 1983. Ironically, GSA, the 
official collector of data on government information technol¬ 
ogy, calculated the 210,000 figure by multiplying a Time esti¬ 
mate of 3.5 million personal computers in the country by the 
government's traditional 6 percent share of the country's com¬ 
puting resources. The 210,000 estimate is probably high because 
the government owns a disproportionate share of large-scale 
computing equipment. 


Price 


Agency 

Quantity 

(thousands) 

Department of the Navy. 

. 10,649 

$28,700 

NASA. 

. . 4,029 

14,080 

Department of the Air Force. 

. 4,009 

13,797 

Environmental Protection Agency 

. 1,910 

9,893 

Department of Transportation . . . 

. 1,729 

10,324 

Department of Agriculture. 

. 1,501 

5,914 

Department of the Interior. 

. 1,348 

5,364 

General Services Administration . 

. 1,066 

3,988 

Department of Energy. 

. . 924 

3,662 

Department of Commerce. 

. . 924 

3,698 

Subtotal. 

. 28,069 

$99,420 

All others (51 agencies). 

. 9,188 

37,800 

Total. 

. 37,277 

$137,220 


SOURCE: General Setvices Administration. 
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Figure 2-4 —Mainframe Computers in Federal Agencies 

1985: Total reported = 26,682 


1980: Total reported = 11,305 
DOD 

DOC 

reasury 

2®S6fi-&!|l| c agencies 





Reported numbers of mainframe 
computers in Federal agencies 


Agency 

1980 

1985 

USDA 

13 

23 

X)C 

967 

915 

DoD 

3,765 

17.565 

iducation 

3 

6 

DOE 

3,718 

2,781 

3HHS 

48 

106 

HUD 

3 

7 

DOI 

81 

250 

Just Ice 

28 

75 

DOL 

11 

15 

State 

5 

6 

DOT 

16 

15 

Treasury 

205 

1,030 

20 small agencies 

2,443 

3,888 

Total 

11,305 

26,682 


DOE 


NOTE Consistency in definitions of mainframe central processing units cannot be assured because of different interpretations of the term 
SOURCE OTA Federal Agency Data Request 


ities. In many cases, both in government and 
industry, information system managers are 
finding that they must reorient themselves to 
respond to disparate needs and to encourage, 
rather than require, microcomputer users to 
use their equipment productively and to ad¬ 
here to guidelines for equipment use. For ex¬ 
ample, many agencies and corporations have 
developed "information centers" where micro¬ 
computer users can receive training, peruse 
software libraries, and in some cases get ac¬ 
cess to mainframe data. 56 

Many Federal agencies have begun to focus 
on the use of microcomputers and on devel¬ 
oping supporting efforts. GSA, for example, 
has published guides for purchasing and man¬ 
aging small computers, has negotiated sched¬ 
ule contracts for agencies to purchase the ma¬ 
chines, and has taken the unprecedented step 
of awarding a contract for the operation of re¬ 
tail computer stores for government agencies 
at its offices in Washington, DC, Atlanta, and 


'Institute of Computer Science and Technology, National 
Bureau of Standards, Microcomputers: A Review of Federal 
Agency Experiences, NBS Special Publication 500-102, J une 
1983. See also OTA's study, Automation of America Offices, 
December 1985, for more extensive discussion of the use of 
microcomputers in officeautomation. 


Philadelphia. 57 NBS has issued a variety of 
guidance documents as well, and has devel¬ 
oped a popular microcomputer bulletin board 
for Federal microcomputer users and man¬ 
agers to share their experiences. The board 
now includes information not only on micro¬ 
computers, but also on computer security and 
information resources management generally 
(the latter in cooperation with GSA). 58 

Age and Obsolescence of 
Federal Computers 

One indicator of the health of the Federal 
Government's procurement process is the ex¬ 
tent to which the government is, in fact, using 
up-to-date technology. There is a long-stand¬ 
ing and widespread perception that many of 
the government's computers are antiquated, 


"See GSA, "Managing End User Computing in the Federal 
Government, "J une 1983; "End User's Guide to Buying Small 
Computers, " August 1984. GSA is currently coordinating an 
interagency study committee that aims to develop further guid¬ 
ance on Federal end-user computing. 

"NBS.op.cit.; also NBS Special Publication 500-110,A//- 
crocomputers: Introduction to Features and Uses, March 1984; 
NBS Special Publication 500-120, Security of Personal Com¬ 
puter Systems: A Management Guide, J anuary 1985. NBS staff 
report that there are roughly 1,100 calls to the bulletin board 
each month. 
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Figure 2.5.—Computer Terminals in Federal Agencies 


USDA 
DOC 
DOD 
Education 
DOE 
DHHS 
J HUD 
? DOI 

DOL 

State 

DOT 

Treasury 

20 small* 




1,000 


liu A A 5jhr 


(67,872) 


(16,710) 


(1 1,192) 


(28.848) 


uk —rfu-rfr 


(29,389) 


10,000 


Number of terminals 


□ 1980 (Total =36,383) 

’20 selected Independent agencies that received OTA's data request 
SOURCE OTA Federal Agency Data Request 

and that the procurement process makes ob¬ 
taining more effective technology difficult, if 
not impossible. For example, a 1980 GAO re¬ 
port noted: 

The current murky acquisition cycle, which 
is long, complicated, and frustrating, has con¬ 
tributed to the obsolescence of Federal com¬ 
puters. 59 

"GAO, Continued Useof Costly, Outmoded Computers in 
Federal Agena"es Can Be Avoided (Dec. 15, 1980), p. i. See also 
GAO, Non-Federal Computer Acquisition Practices Provide 
Useful I nformation for Streamlining Federal M ethods (Oct. 2, 
1981), for essential background in this area. For a discussion 
of the popular perception that Federal computers are obsolete 
and that procurement processes are excessively complex, see 
A. Neely, "Can Old Computers Learn New Tricks? Federal Man¬ 
agers Try FI i-Tech Comeback," National Journal, J une23, 1984; 
and L. Wynter, "Federal Bid to Update Agencies'Computers 
Faces Many Obstacles, " Wall Street Journal, Feb. 13, 1985. 


1985 (Total = 173,069) 


There are two important caveats in any dis¬ 
cussion of the age of Federal information tech¬ 
nology. One is that there is tremendous vari¬ 
ation among and within agencies. Certain 
applications, particularly some of those in re¬ 
search and in defense "C 3 I" (Command, Con¬ 
trol, Communications and Intelligence-as op¬ 
posed to the routine business of Pentagon 
budget and logistics, for example), use state- 
of-the-art information technology tools. Sec¬ 
ond, there are important differences between 
the Federal Government and the private sec¬ 
tor, such as the complexity of Federal appli¬ 
cations, the emphasis in government on max¬ 
imizing competition and obtaining careful cost 
justification, and the tax treatment that en¬ 
courages private companies to purchase new 
equipment. In addition, Federal expenditures 







Agency 
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Figure 2-6.—Microcomputers in Federal Agencies 



1,000 2,000 3,000 4,000 5,000 6,000 

Number of microcomputers 

1980 (Total = 2,307) ■ 


7,000 8,000 9,000 10,0 DO 


iyoo (ioiai =yy,utj/’) 


’20 Independent agencies selected by OTA to receiver data request 

NOTE The data request used GSA’s definition of microcomputer, slightly adapted “Any microprocessor-based workstation capable of Independent use — including 
stand-alone and networked personal computers, professional computers, Intelligent terminals, word processors, and other similar devices — costing less than 
$10,000 per unit, but excluding peripherals and separately purchased software. ” 

SOURCE OTA Federal Agency Data Request 


and mistakes are much more highly visible 
than those of the private sector. 60 

Three key reports form the essential back¬ 
ground for examining obsolescence in Federal 
computers. The first was GAO's 1980 report 
previously mentioned. Focusing on computers 
that had a central processing unit purchase 
price of more than $250,000 or a leasing price 


"'see, for example, Mitch Betts, "Speaker Says Bias Colors 
Criticism of Federal DP Shops," Computenvorid, May 13,1985, 
s . 34. The speaker was Robert Head, a Federal computer vet¬ 
eran and at the time an official of the Federal Computer Per¬ 
formance Evaluation and Simulation Center (FEDSIM). 


of over $10,000 per month, GAO concluded 
(see figure 2-7): 61 

The Federal inventory of medium- and 
large-scale computers is outmoded. Of the 
1,366 such processors included in the April 
1979 inventory, over half were technologi¬ 
cally of the 1971 era or earlier. Almost a third 
of them were technologically 15 years old or 
older. Only 2 percent used the technology of 
1975 or later. Unless action is taken to mod¬ 
ernize the government's computers, avoida¬ 
ble costs and unnecessary problems will 
continue. 


"GAO, 1980, op. cit., p. 5. 
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Figure 2-7.—Age of 978 Large- and Medium. Scale 
Federal Computers 

Based on year acquired 
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SOURCE: U S. General Accounting Office, Continued Use of Cost/y, Outmoded 
Computers in Federal Agencies Can Be Avoided, ARM D-81-9, Dec. 15, 
1980. 

Our work showed that the operational costs 
of obsolescent, government-owned equip¬ 
ment can exceed the costs of using newer 
equipment even if the newer equipment is ob¬ 
tained on a short term lease basis. The main¬ 
tenance, power, and cooling costs of out¬ 
moded, owned equipment were greater than 
the leasing, maintenance, power, and cooling 
costs of newer equipment. This alone can 
justify immediate replacement. 62 

The second key report on Federal ADP ob¬ 
solescence, by the National Bureau of Stand¬ 
ards in 1982 (using fiscal year 1981 data), had 
a similar though slightly more optimistic con¬ 
clusion: 

In general, our current statistics indicate 
that the situation of obsolescence is not as 


"Partly in response to GAO’s 1980 report on obsolescence 
in Federal computers, GSA has since 1982 been granting au¬ 
thority to agencies to conduct "technology updates." This pro¬ 
gram allows agencies to replace obsolescent computer systems 
with compatible newer systems of approximately the same com¬ 
puting power, if there are substantial savings. GSA is now re¬ 
evaluating this program in light of the Competition in Contract¬ 
ing Act. 


bad as portrayed in the General Accounting 
Office report, but there is still a large num¬ 
ber of older computers in the Federal inven¬ 
tory. Our analysis suggests that certain 
agencies, particularly the Navy Department, 
Department of J ustice, Department of Com¬ 
merce, and the Department of Transportation, 
should analyze their computer inventories to 
see if upgrading their state of computer tech¬ 
nology is in order. 63 

Finally, the third and most recent major 
study of obsolescence downplays the problem 
significantly. GSA identified 100 major sys¬ 
tems "considered crucial to the nation," and 
found that "ADPE obsolescence in the Fed¬ 
eral Government is not as extensive as has 
been claimed." GSA defined an obsolete CPU 
as one that is more than two production cy¬ 
cles old, and assumed an average production 
cycle for large-scale computers of 4 years. 
Hence, since the study used fiscal year 1984 
data, any machine that has an "original pro¬ 
duction date" (i.e., was first manufactured) 
earlier than 1976 would be considered obso¬ 
lete. Of the 100 systems studied: 

• 11 use commercial timesharing resources, 
and, as such, are presumed to be proc¬ 
essed by modern ADPE; 

• 57 are 1976 or newer, and 39 (over two- 
thirds) of these are supported by CPUS 
with a 1978 or newer first production 
date; 

• 19 have CPUS with pre-1976 original pro¬ 
duction dates, but 14 of these are in some 
stage of upgrade or replacement; i.e., 
agency procurement request pending, 
award granted, but equipment not yet in¬ 
stalled, etc.; and 

• 13 are mixed; i.e., CPUS supporting these 
systems have first production dates of 
both pre-1976 and 1976 or newer. (I n gen¬ 
eral, 1976 or newer technology is predom¬ 
inate in these applications, and four of 
these systems are being upgraded or re¬ 
placed.) 64 


"Martha Gray, National Bureau of Standards, Institute for 
Computer Sciences and Technology, Federal ADP Equipment: 
A Compilation of Statistics-1981, November 1982, p. 35, 
"General Services Administration, Assessing ADPE Ob¬ 
solescence in Major Federal Systems, February 1985, p. 9. 
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This analysis shows that only 5 percent of 
these major systems are being totally sup¬ 
ported by obsolete CPUs that are not in the 
process of being upgraded or replaced. In addi¬ 
tion, OMB's 1984 5-year plan asserted that 
"the average length of time in service for Fed¬ 
eral computers is decreasing. At the end of fis¬ 
cal year 1979, it was 7.3 years; at the end of 
fiscal year 1983,6.6years. "“However, GSA's 
data, which is the base information for several 
of these analyses, are known to be inaccurate. 66 
GSA's revised database should ultimately pro¬ 
vide further information. 

Responses to OTA's data request (see fig¬ 
ure 2-8) also provided evidence of a modern¬ 
ization trend in Federal computers. When 
asked to specify the average age of their main¬ 
frame computers, the number of agency units 
reporting average ages of their mainframe 
computers from 0 to 3 years jumped from 31 
percent in 1975 to 60 percent in 1984, and the 
number of units reporting average ages greater 
than 6 years declined from 49 percent in 1975 
to 11 percent in 1984. Because of methodologi¬ 
cal differences, OTA's data are not strictly 
comparable with the length of service data 
above. For example, OTA's data request asked 
agencies to report average ages of all of their 
mainframes. OTA's data may also be optimis¬ 
tic about obsolescence because agency compo¬ 
nents with only a few newer computers are 
given the same weight in these statistics as 
agency components with thousands of com¬ 
puters. 

Several other indicators suggest that the ob¬ 
solescence problem has indeed been improving 
over the past 5 years: 

• Federal agencies have dramatically in¬ 
creased both their overall expenditures 
for information technology and their cap¬ 
ital investment levels. According to OMB 


"OM B, GSA, and Commerce/NBS, A Five-Year Plan for 
Meeting the Automatic Data Processing and T elecommunica- 
tions Needs of the Federal Government, April 1984, vol. l,p.3. 
“”GSA acknowledged this in its 1985 report, op. cit. 


Figure 2-8.—Average Age of Mainframe Computers 
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documents, agencies had capital invest¬ 
ments for information technology in 1982 
of $1.01 billion, 11.2 percent of the $9.1 
billion total information technology obli¬ 
gations; obligations soared to $2.86 bil¬ 
lion, 19.6 percent of the $14.6 billion to¬ 
tal in fiscal year 1985; and eased back 
down to $2.17 billion, 14.3 percent of the 
total $15.2 billion in fiscal year 1986. 67 

• In addition to capital investment, agen¬ 
cies also seem to be increasing the propor¬ 
tion of their information technology ex¬ 
penditures that is for commercial services. 
In 1983 to 1985, the proportion was 44 
to 45 percent, but in 1986 the proportion 
is expected to increase to 50 percent. 
According to GSA and industry analysts, 
one can safely assume that commercial 
vendors of ADP services use relatively 
up-to-date equipment. 68 

• Similarly, an International Data Corp. 
forecast expects Federal spending for 
ADP equipment and supplies (both ren¬ 
tal and purchase) to grow from $2.3 billion 
in 1983 to $4.0 billion in 1988. Particu¬ 
larly high growth is expected in purchases 
of ADP systems, from $607 million in 
1983 to $1.51 billion in 1988. 69 As noted 
earlier, Gramm-Rudman-Hollings deficit 
cutting measures are sure to affect planned 
spending, although the magnitude of these 
effects is unknown. 

• Finally, experts consulted by OTA, both 
government officials and vendor represen¬ 
tatives, generally agree that much mod¬ 
ernization has taken place in the last few 
years, and a great deal more is planned. 70 

"OMB, GSA, and Commerce/NBS, op. cit., April 1983; 
April 1984; J une 1985. 

'I bid.; and GSA, Assessing ADPE Obsolescence, op. cit. 

"International Data Corp., "Federal Market Spending 
Analysis: 1983-1988,"J une 1984. 

’"This was the sentiment, for example, at OTA’s work ses¬ 
sion on information technology management, procurement, and 
planning, J une 26, 1985. For some of the major planned mod¬ 
ernizations, see OMB, GSA, and Commerce/NBS, op. cit., 1985, 
which describes the system plans for the Patent and Trademark 
Office Automation Plan, Internal Revenue Service Tax System 


However, examples of antiquated Federal 
computers remain. 

Length of the Procurement Process 

Essentially, as noted earlier in this chapter, 
the procurement process is in flux. There are 
few reliable indicators of the health and effec¬ 
tiveness of the process, and the indicators that 
do exist are mixed. 

While the results of OTA's Federal Agency 
Data Request can only be considered sugges¬ 
tive in this area, 71 they show a fairly consist¬ 
ent pattern. As shown in figure 2-9, the plot 
of average procurement times peaks at 1 to 

1.5 years for both 1980 and 1984, with a sub¬ 
stantial number of procurements in the 0.5 to 
1 and 2 to 2.5 year slots. Very few procure¬ 
ments were reported to have taken longer than 

2.5 years. The most prevalent factors cited for 
increases in the length of the procurement 
process were the time it takes to get a delega¬ 
tion of procurement authority from GSA, as 
well as the changing regulations (especially the 
Competition in Contracting Act and GSA 
rules) and the various levels of review and 
oversight (including preparation of voluminous 
justification documents) that are required for a 
large procurement. On the other hand, a few 
agencies reported that increasing thresholds 
for delegation of procurement authority from 
GSA in fact decreased their procurement time. 


Redesign, Federal Aviation Administration Advanced Auto¬ 
mation Plan, Department of Defense Tri-Service Medical In¬ 
formation System Composite FIealth Care System, Census Bu¬ 
reau Decennial Census Program, Social Security Administration 
Systems Modernization Plan, Department of Agriculture Farm 
Agency System, and Department of Energy Laboratory 
System. 

"Of 134 responses total, 80 agency components responded 
to OTA’s request for average procurement times of mainframe 
computers in 1975,1980, and 1984. The brevity of the ques¬ 
tion clearly had some flaws; for example, an average procure¬ 
ment time may not give a good indication of exceptionally long 
or short procurements; the point at which procurement time 
begins or ends was not specified; and the data request did not 
examine software procurement, which clearly deserves study. 
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Figure 2-9.—Average Procurement Time for Mainframe Computers 
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APPENDIX 2A.-EXCERPTS FROM MAJOR STUDIES AND POLICY 
ACTIONS IN INFORMATION TECHNOLOGY MANAGEMENT 


The widespread use of electronic systems for 
handling large volumes of data has developed only 
in the last few years. . . .We have noted that the 
general trend has been to use electronic computers 
in segments of agency operations rather than in 
systems in which management procedures and 
controls over related functional areas are fully in¬ 
tegrated. . . .The principal recommendation in our 
report is concerned with the need to establish an 
effective and coordinated program of joint effort 
by the interested agencies of the government. 

—J OSeph Campbell, (’comptroller General, GAO, letter report to 
Hep. Sam Hay burn. June 27,1958 


The findings on the impact of ADP previously 
reported herein indicate that dynamic leadership 
of the ADP program of the Federal Government 
is a vital necessity. Passive, partial, or informal 
types of leadership have had their place, but have 
now outworn their usefulness. 

Report of Findings and Recommendations Resulting From the 
Automatic Data Processing (AI)PI Responsibilities Stud~r, Septen]- 
ber 1 958- June 1 959, Bureau of the Budget, p. 20 

After 6 years, the type of leadership the Bureau 
of the Budget (BOB) recommended in this early 
automatic data processing (ADP) management 
study has yet to be realized. This legislation would 



38 


establish the authority and provide the operational 
machinery needed for the effective and efficient 
management of this costly equipment. 

-Senate Report (Government Operations Committed No. 938, Oct. 

22,1965, To accompany H.R. 4845 (‘The Brooks Act'), p. 1 

In the case of paperwork, the compartmentali- 
zation of policy and operating authorities and func¬ 
tions has resulted in the failure to consider syste¬ 
matically less paperwork-intensive alternatives, 
the costs involved to everyone when new programs 
are designed and implemented are not fully taken 
into account, and citizens are extremely dissatis¬ 
fied with the manner in which they are served by 
and interact with their Government. 

Therefore the commission concludes that central 
policy and operating functions and authorities for 
Government's automatic data processing, statis¬ 
tical, public-use reporting, interagency reporting, 
forms, microform, word processing, telecommuni¬ 
cations and related paperwork, information and 
communications programs should be brought to¬ 
gether in a central management authority. Corre¬ 
spondingly, at the agency level, operating func¬ 
tions and authorities should be consolidated under 
the direction and control of an appropriate central 
management authority in each executive depart¬ 
ment and agency. 

-Information Resources Management, Report of the Commission 
on Fedeal Papework (Washington, DC: GPO, 1977), p. 65 

1) The Federal Government needs to take ac¬ 
tions that will establish the importance of infor¬ 
mation technology, provide tools for its manage¬ 
ment, and set national and federal goals for its 
productive use. 

2) The Federal Government needs to improve 
and expand its use of modern information technol¬ 
ogy to increase and enhance the level and quality 
of governmental service delivery while reducing 
costs. 

3) The Office of Management and Budget needs 
to establish a policy requiring that costs of data 
processing be charged back to the using agency 
and program in program-related terms. 

4) The Federal Government needs to set as an 
objective the removal from service of all informa¬ 
tion technology components which have outlived 
their cost-effective life. 

5) The Federal Government needs to significant¬ 
ly alter its process for acquiring information tech¬ 
nology resources. Increased emphasis should be 
placed upon the planning, needs definition, and 
justification phases of acquisition. 

6) The Federal Government needs to upgrade the 
training and career development required for func¬ 


tional managers, reclassify personnel skilled in the 
management or use of information technology, and 
establish appropriate career paths for such 
persons. 

7) The program and mission agencies need to be 
strengthened to meet the general requirements for 
managerial and technical expertise in information 
technology. The agencies must have prompt ac¬ 
cess to resources which can help them solve their 
problems. 

8) The Federal Government needs to institute 
a research and development program in informa¬ 
tion technology to meet the needs of the non¬ 
defense sector. 

9) The Federal Government needs to revitalize 
its efforts to establish and maintain a standards 
program for information technology in order to 
support the economic purchase of equipment and 
the economic and effective operation of computer 
resources. 

-Information Technology and Govenmental Reorganization: Sum¬ 
mary of the Fedeal Data Processing Reorganization Project, OMB, 

April 1979, pp. 6-18 

The Paperwork Reduction Act creates a single 
control point for the management of Federal in¬ 
formation resources. It ends the fragmented respon¬ 
sibility for controlling Federal paperwork burdens 
which exists today and establishes visible and 
accountable officials for information management 
within the Office of Management and Budget and 
each agency. 

-Senate Report (Governmental Affairs Committee) No. 96-930, 
to accompany the Paperwork Reduction Act of 1980, 

Sept. 8, 1980, p. 5 

The ADP Task Force found that the Federal 
Government is not effectively managing its infor¬ 
mation technology resources and, therefore, miss¬ 
ing out on substantial potential cost savings. The 
Government has failed to develop a coherent sys¬ 
tem for ADP planning and management. As a re¬ 
sult, it has not capitalized on the substantial op¬ 
portunities for cost savings and effectiveness 
improvement. 

-President Private Sector Survey on Cast Control ("The Grace 
Commission '), Report on Automated Data Processing/oiiice Auto¬ 
mation, spring-fall 1983, p. Hi 

Despite substantial improvements, Federal agen¬ 
cies have not realized the efficiency improvements 
and economic returns that information technology 
has made possible... the little planning that has 
taken place has not been as concerned with sav¬ 
ings and efficiency improvements as it should have 
been. 

To recapture the Government's position as a 
leader in the efficient and productive use of infor- 
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mation technology, the Administration has adopted 
a three-point strategy: (1) develop and issue effec¬ 
tive and up-to-date Government-wide policies, pro¬ 
cedures and guidelines; (2) ensure implementation 
of those policies through earlier policy-level, OMB 
involvement in the planning and decision-making 
processes of selected agencies with significant in¬ 
vestments in information technology; and (3) de¬ 
velop results-oriented measures of performance to 
ensure maximum return on the Government's in¬ 
vestment in information technology. . . . 

• Agencies will be required to document at least 


a io percent return on their information tech¬ 
nology investments; 

Z Agencies will be required to implement stand¬ 
ards that foster open systems of communication 
and permit the exchange of information among 
systems; 

• Greater reliance will be placed on the acquisi¬ 
tion of commercially available software to re¬ 
duce the Government's dependence upon locally 
developed, customized software. 

-Office of Management and Budget, Management of the United 
States Government Fiscal Year 1986 
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Chapter 3 

Policy Issues in Management, 
Planning, and Innovation 


SUMMARY 


This chapter examines a set of issues related 
to information technology management and 
innovation in Federal agencies. Specific topics 
that are of interest include the strengths and 
weaknesses of current agency and govern¬ 
mentwide planning efforts; the adequacy of 
policies for planning, procurement, and man¬ 
agement; the extent to which agencies are 
using information technology in strategic and 
innovative ways; the extent to which planning 
efforts consider the civil liberties impacts of 
information technology use; and the adequacy 
of information available to Congress in the 
areas of planning and management. In this 
analysis, it is important to note that planning 
for information technology cannot be divorced 
from agency planning as a whole, and in fact 
there should be substantial interaction be¬ 
tween the two processes. 

Almost si nee the first uses of computers in 
the government, there has been a building con¬ 
sensus that the Federal Government's plan¬ 
ning in this area is often weak, resulting in 
serious problems implementing the govern¬ 
ment's large-scale systems, and in failures to 
capitalize on opportunities to use information 
technology. The reasons for this chronic weak¬ 
ness in Federal information technology plan¬ 
ning include rapid change in technology, fre¬ 
quent top-level management turnover, changes 
in political goals, bureaucratic defensiveness, 
scarce personnel and time, and short-range 
budget and procurement processes. 

OTA's major findings in this area are: 

• Effective planning is an essential compo¬ 
nent of effective use of information tech¬ 
nology. Many Federal agencies have begun 
to develop thoughtful plans. However, 
many of these efforts appear to have ma¬ 
jor flaws, including a focus on operational 


as opposed to strategic plans, a failure to 
identify innovative opportunities for use 
of information technology, and a failure 
to connect planning effectively to imple¬ 
mentation. 

• The annual "5-year plans" currently pub¬ 
lished by the Office of Management and 
Budget (OMB) lack an analysis of agency 
or governmentwide strategies for using 
information technology to further govern¬ 
ment missions. They also do not discuss 
the security, privacy, and civil liberties 
implications of information system plans. 
Without such information, congressional 
oversight of information technology man¬ 
agement and security/privacy issues is 
much more difficult. 

• There are serious deficiencies in the infor¬ 
mation available to Congress, and to the 
agencies themselves, on the scope and na¬ 
ture of information technology in use in 
government. These deficiencies could 
present difficulties for effective congres¬ 
sional oversight and agency decisionmak¬ 
ing regarding information technology use. 

For the Federal Government to improve its 
effectiveness in using information technology, 
the quality of information about information 
technology needs to be improved, innovation 
needs to be encouraged and pursued more 
vigorously, and strategic planning needs to be 
significantly strengthened. Though much of 
this can be done by the executive branch act¬ 
ing alone, Congress can facilitate and encour¬ 
age some of these actions. OTA analysis in¬ 
dicates that the following actions warrant 
congressional as well as executive branch con¬ 
sideration: 

. Holding hearings or conducting studies 
on the accuracy and usefulness of infor- 
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mation being collected by the General 
Services Administration (GSA) and OMB; 
the extent of innovative uses of informa¬ 
tion technology in Federal agencies; com¬ 
parisons between government and private 
sector information technology planning 
strategies; the extent to which agencies 
are using information technology to fur¬ 
ther government goals; and the effective¬ 
ness of the procurement process. 

• Encouraging effective use of information 
technology by giving stronger mandates 
to central agencies to collect and distrib¬ 
ute documentation of innovative applica¬ 
tions; designating a formal resource cen¬ 
ter for information technology planning 
and innovation; strengthening the role of 
the National Bureau of Standards (NBS) 
in providing technology trend information 
to agencies; enhancing training for infor¬ 
mation technology planners, procurement 


officers, and managers; experimentally 
exempting certain agencies from procure¬ 
ment regulations; and assembling an in¬ 
terdisciplinary team to assist agencies in 
developing and salvaging major informa¬ 
tion technology projects. 

• Amending the Paperwork Reduction Act 
to give agencies a clear mandate for stra¬ 
tegic planning; to clarify the mandate for 
the "5-year plan" from the Office of Man¬ 
agement and Budget to include informa¬ 
tion useful to Congress; to specify that 
agency and governmentwide planning ef¬ 
forts must consider security, privacy, and 
civil liberties impacts; to strengthen the 
definition of information resources man¬ 
agement (I R M) i n the act; and to desi g- 
natean additional assistant secretary, for 
some agencies, who would be responsible 
for IRM. 


INTRODUCTION 


This chapter examines a set of issues related 
to information technology management and 
innovation in Federal agencies. Specific topics 
that are of interest include the strengths and 
weaknesses of current agency and govern¬ 
mentwide planning efforts; the adequacy of 
policies for planning, procurement, and man¬ 
agement; the extent to which agencies are 
using information technology in strategic and 
innovative ways; the extent to which planning 
efforts consider the civil liberties impacts of 
information technology use; and the adequacy 
of planning and management information 
available to Congress. In this analysis, it is im¬ 
portant to note that planning for information 
technology cannot be divorced from agency 
planning as a whole; in fact, there must be sub¬ 
stantial interaction between the two processes. 

Although different theorists and organiza¬ 
tions use different terms, planning efforts gen¬ 
erally differ along two dimensions: 

1. The length of time considered by the plan¬ 
ning process. Generally, plans for more 
than 1 to 2 years hence are generally con¬ 


sidered long term, while others are con¬ 
sidered short term. 

2. The extent to which plans seek to define 
new goals and programs. Those that do 
so are generally termed strategic plans, 
whereas plans that extrapolate from the 
current situation and describe the imple¬ 
mentation of existing goals and programs 
are called tactical or operational plans. 

There are many permutations of these terms 
for different planning applications. For exam¬ 
ple, OMB's guidance for planning strategies 
defines the different types of planning as 
follows: 1 

• Long-term or strategic planning is a proc¬ 
ess for defining agency missions and iden¬ 
tifying agency goals and objectives as 
projected over a specified period of time. 
In the context of automatic data process¬ 
ing (ADP) and telecommunications, long- 

'Officeof Management and Budget, General Services Ad¬ 
ministration, and Department of Commerce/National Bureau 
of Standards, A F'ive-Year Plan for Meeting the Automatic Data 
Processing and Telecommunications Needs of the Federal Gov¬ 
ernment, 'Volume 1: Planning Strategies, "April 1984, p. 12. 
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range planning develops and documents 
the agency's direction and specifies the 
activities and resource requirements nec¬ 
essary to support stated missions and ob¬ 
jectives. 

• Tactical planning involves identifying and 
scheduling the appropriate means for at¬ 
taining the stated objectives of individ¬ 
ual ADP and telecommunication activi¬ 
ties that support the strategic plan. 

• Operational planning integrates individ¬ 
ual tactical plans and drives the day-to- 
day activities of line operations. 

Private sector planning experts generally 
place considerably more emphasis on the stra¬ 
tegic, goal-seeking aspect of planning. For ex¬ 
ample, one business administration text de¬ 
fines strategic planning as: 

... the continuous process of making present 
entrepreneurial (risk-taking) decisions system¬ 
atically and with the greatest knowledge of 
their futurity; organizing systematically the 
efforts needed to carry out these decisions; 
and measuring the results of these decisions 
against the expectations through organized, 
systematic feedback. 2 

While there are few, if any, disagreements 
on the importance of planning to effective use 
of information technology, on a practical level 
there are differing notions of what constitutes 
an effective and realistic plan. Federal infor¬ 
mation technology managers contacted by 
OTA often cited the following factors as affect¬ 
ing what is realistically possible from their 
planning efforts, and what level of effort plan¬ 
ning deserves: 3 

• Since information technology is changing 

so rapidly, it is difficult to anticipate what 
technology will be available for agency 
use more than a few years from now. 


'Peter Drucker, Management (New York: Harper & Row, 
1974), p. 125 (emphasis original). 

"While these perceptions are not necessarily correct or de- 
si rabl e i ndi cators of the cu rrent si tuati on, i t i sota s assess¬ 
ment that they are reasonably widely held in the Federal in¬ 
formation technology management community. There are, of 
course, some exceptions, and as will be discussed below, many 
agencies have proceeded in developing long-range plans despite 
these factors. 


• The frequent top-level management turn¬ 
over in the executive branch means fre¬ 
quent shifting of priorities, and thus plan¬ 
ning beyond 1 or 2 years often results in 
(seemingly) wasted effort. 

• Agencies' long-range goals, both general 
and specific to information technology, 
are determined by a political process that 
includes, in particular, the White House 
and Congress. These goals also seem to 
be frequently shifting. 

• Goals that are set forth visibly in long- 
range plans often become targets for at¬ 
tack by central management agencies or 
Congress. Thus, it often seems easier to 
develop information technology capabil¬ 
ities incrementally. 

• When personnel and time are scarce, and 
when the ability of information systems 
to meet demands reaches a state of cri¬ 
sis, planning seems to be a diversion from 
survival. This was the case, for example, 
in the Social Security Administration in 
the late 1970s; although many believe 
that it was only by developing a coherent 
plan for the early 1980s that SSA came 
out of its tail spin. 

• It is difficult to develop goal-oriented, 
long-range plans when the budget and 
procurement processes are relatively rigid 
and short range. This factor has intensi¬ 
fied after enactment of the Gramm-Rud- 
man-Hollings deficit reduction act, since 
uncertainty about future budgets has 
been increased considerably. 

The combination of these factors tends to 
push agencies toward incremental, operational 
plans, as opposed to strategic plans. Never¬ 
theless, there has been progress in the qual¬ 
ity and foresight of government information 
technology planning. As noted in chapter 2, 
both GSA and OMB have given high visibil¬ 
ity to the need for planning and have issued 
a variety of guidance documents to assist 
agencies in the process. GSA, for example, de¬ 
fines a generic planning process to include 
seven steps: 4 


'General Services Administration, IRM Rs/iew Handbook, 
1985, p. 39. 
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1. update agencywide inventories of infor¬ 
mation resources; 

2. define the missions, broad objectives, and 
policies of the IRM organization; 

3. develop approaches for achieving agency 
missions and broad IRM objectives with¬ 
in the context of existing policies; 

4. prepare specific top-down planning direc¬ 
tions (call for plans); 

5. develop, consolidate, and approve detailed 
plans and budgets; 

6. prepare supplemental analyses; and 

7. prepare progress reports based on per¬ 
formance against the plans. 

GSA has also recently established a small 
group to provide planning assistance to agen¬ 
cies on a reimbursable basis. 5 

Clearly, different planning styles are appro¬ 
priate for agencies differing in mission, struc¬ 
ture, and size. Table 3-1 shows some of the di¬ 
mensions along which agency planning styles 
differ. Nevertheless, the standards by which 
most experts would judge a planning process 
to be effective are reasonably consistent. OTA 
found that the following criteria are useful in 
judging planning effectiveness, both at the 
agency and governmentwide levels: 

• Do information technology plans support 
overall agency plans? Clearly, the overrid¬ 
ing function of a plan is to help the agen¬ 
cy pursue its mission. This requires link¬ 
ing information technology plans to the 
agency's overall plans. To the extent that 
overall agency planning efforts are weak, 
information technology plans may be 
flawed as well. 

• Does the plan identify opportunities force 
ordination of information technology proj¬ 
ects? Another role of a plan is to allow co¬ 
ordination of the agency's resources in 


5 GSA began the Federal IRM Planning Support Program 
in 1983; in fiscal year 1985 it had 13 planning specialists work¬ 
ing on 18 active programs, providing roughly $1 million in re¬ 
imbursable services to the agencies. OMB’s Bulletin 85-12 said 
that OMB asked GSA to construct a database of current agency 
information resources and major proposals. I n GSA’s review 
comments to ota, GSA said that this database was in fact 
stymied because OMB was not supporting its development. 


Table 3.1.—Dimensions Along Which Agency 
Planning Styles Differ 


Goal driven.I ncremental 

Long term.Short term 

Some agencies take a long-term, strategic approach to in¬ 
formation technology planning looking for ways to integrate 
information technology into the agency strategic plans. Other 
agencies look primarily to modest improvements they can 
make in existing systems that will enable them to do their 
job better. 

Centralized.Distributed 

Agency planning can vary from highly centralized, headquar¬ 
ters based approaches to highly decentralized, localized plan¬ 
ning by individual agencies, regional offices, or field offices. 

TOp down.Bottom up 

Hierarchical.Participatory 

Some agencies encourage participation from line offices and 
interested individuals. Other agencies prefer to have top 
managers create the framework within which other managers 
operate. Most agencies use some mix of the two. 

Structured.Informal, ad hoc 

While the requirements of the Paperwork Reduction Act of 
1980 and the resulting OMB and GSA guidance have in¬ 
creased the formalism of all agency plans, styles continue 
to range from highly structured, rigidly scheduled, formal 
processes to informal assessments of future information 
technology needs and potential. 

I ntegrated.F ragmented 

Several agencies look at their information technology 
resources in an integrated, system wide manner. Others take 
a less coherent, more fragmented approach by planning the 
future of individual technologies, databases, or pieces of 
hardware. 

Security/privacy.Efficiency/access 

Agencies differ in the degree to which they pay attention to 
security and privacy issues. Some are concerned primarily 
with increasing efficiency of operations and providing access 
to internal and external authorized users. Others take great 
pains to protect the security of the system and the integrity 
of data. 

Forefront technology.Established technology 

Some Federal agencies are dependent on leading edge or 
state-of-the-art technologies such as supercomputers. Others 
only need established routine technologies such as personal 
computers or office automation equipment. 

SOURCE J F. Coates, Inc., Scenarios of Five federal Agencies as Shaped By 
Information Technology, OTA, contractor report, June 1985. 


pursuing various projects, and to ensure 
that systems developed will be compatible. 

• Does the plan identify opportunities for 
innovative uses of information technology 
to pursue agency missions? This is the 
strategic aspect of an information tech¬ 
nology plan, where a planning effort 
should catalyze creative thinking by agen¬ 
cy staff on ways to deliver services in new 
ways or to improve efficiency. 
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• Does the plan incorporate concerns for secu¬ 
rity, privacy, and fair information practices 
at an early stage in the planning process? 
While there is little dispute that the best 
way to design a secure information sys¬ 
tem is to consider security throughout the 
planning, implementation, and use of a 
system (see ch. 4), this point is often not 
explicitly recognized by planners. Simi¬ 
larly, concerns for privacy and fair infor¬ 
mation practices are most easily accom¬ 
modated when they are introduced at an 
early stage of system planning. 

• Does the planning process provide a mech¬ 
anism for interested publics to provide in¬ 
put into major projects for public services 
or information dissemination? Obtaining 


the views of those who will be significant¬ 
ly affected by a major project can help 
avoid unanticipated pitfalls and make the 
system more useful. Several examples can 
be found in major projects for electronic 
dissemination of information (see ch. 7). 

• Does the process involve both management 
and operating levels of the organization so 
that they (on the whole) are committed to 
implementation of the plan? The experi¬ 
ences of government and private sector 
planners indicate that those who are to 
execute the plan must be part of the plan¬ 
ning process, and must largely support 
the plan. Otherwise, a well-crafted plan 
can become simply irrelevant to the orga¬ 
nization's activities. 


MAJOR FINDINGS 


Finding 1 

Effective planning is an essential compo¬ 
nent of effective use of information tech¬ 
nology. Many Federal agencies have begun 
to develop thoughtful plans. However, 
many of these efforts appear to have flaws, 
including a focus on operational as opposed 
to strategic plans, a failure to identify inno¬ 
vative opportunities for use of information 
technology, and a failure to connect plan¬ 
ning effectively to implementation. 

There is almost no disagreement on the im¬ 
portance of planning for information technol¬ 
ogy use, both in government and in business. 
While there may be differences among Federal 
officials about the feasibility of long-term plan¬ 
ning in the Federal Government bureaucra¬ 
tic environment, it is well understood that 
planning for information technology is essen¬ 
tial to enhance the ability of an agency to use 
the technology well, especially when complex 
systems are involved. 

The results of OTA's Federal Agency Data 
Request indicate that despite the problems 
and criticisms there are substantial planning 
efforts under way. Many agencies' plans ap¬ 
pear to set appropriate goals, and are carefully 


prepared, detailed, and useful. Despite these 
efforts, however, many of the plans seem to 
suffer from a similar set of problems. 

Focus on the short-range. Although most 
agencies have developed 5-year plans as a re¬ 
sult of OMB guidelines and requirements, 
only a few of the plans devote much effort to 
years 3 to 5, or develop the plan in a truly 
"strategic' fashion—that is, seeking out new 
aspects of their mission and opportunities for 
information technology to improve the agen¬ 
cy. 6 ! n some cases, this may be because staff 
assigned to prepare the plan do not have the 
authority to develop strategic goals, or do not 
have the attention of the agency's top man¬ 
agement. Moreover, in most cases, the later 
years of a 5-year plan are not considered credi¬ 
ble because they involve acquisitions not yet 
approved by GSA and Congress, and from pri¬ 
or experience most bureaucrats expect that 
the approval process will alter the future sig- 


'An interesting exception seems to be the Department of 
Agriculture, which has published a small monograph, 'The Fu¬ 
ture of I nformation Resources Management in the Department 
of Agriculture (A Strategic Framework), "April 1985. The mono 



nology. 
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nificantly, for good or ill. This factor provides 
further incentive for agencies to spend less ef¬ 
fort on long-range planning. Ironically, the 
central management agencies would argue 
that a carefully prepared long-range plan 
should help budget requests survive the ap¬ 
proval process without major upheaval,' and 
that such a plan is the only way to make sub¬ 
stantial progress in the agency's use of infor¬ 
mation technology. 

OMB has recognized the scarcity of long¬ 
term planning. As its deputy director noted, 

So far, few agencies have taken advantage 
of the opportunities that have really been 
offered by modern information technology 
we have not had enough attention paid to 
long-term planning for ADP processing and 
telecommunications. 8 

As a response, OMB devoted the bulk of vol¬ 
ume 1 of the 1984 5-year plan to a tutorial on 
effective planning, and to examples of agen¬ 
cies that do have a significant planning proc¬ 
ess. Also, in OMB's latest guidance on plan¬ 
ning, Bulletin 85-12 (Mar. 29, 1985), OMB 
tried to adapt these incentives so that good 
planning would more clearly lead to easier ac¬ 
quisitions. The bulletin, which requests a va¬ 
riety of planning information from agencies, 
states that acquisitions that are approved as 
part of planning and management reviews in 
the spring will have a "shortened and simpli¬ 
fied" budget approval process in the fall. 9 

There are at least a few examples where this has occurred. 
A Department of J ustice manager, for instance, reported that 
because the/ take the planning process seriously (and use some 
bureaucratic resourcefulness) they have a considerably easier 
time with oversight and approval of their plans, and actually 
follow the plans for the most part. (Frank Guglielmo, Acting 
Director, Computer Technology and Telecommunications Staff, 
Office of I nformation Technology, Department of J ustice, 
"Streamlining Acquisition, " address to Government Computer 
Expo, Washington, DC,J une 13,1985.) 

"J oseph Wright, testimony to House Science and Technol¬ 
ogy Subcommittee on Transportation, Aviation, and Materi¬ 
als, hearings on "Computer and Communications Security and 
Privacy," Sept. 24,1984, p. 4. 

"As might be expected, efforts by central management 
agencies to "collect information' are viewed with some suspi¬ 
cion by line agencies. One cabinet agency told OTA in review 
comments that it felt the general perception among agency staff 
was that Bulletin 85-12 was a way for OMB to find places to 
cut budgets and reduce personnel, not necessarily improve 
agency strategic planning. The same agency said that it felt 
OMB's promise for a "shortened and simplified'” fall budget 
approval process was falsified by the fact that, as of October 
1985, nooneat OMBhad indicated they had read their plan 
submitted in April 1985. 


Failure to identify innovative opportunities. 

In addition to meeting current operational 
needs, long-term planning is necessary for 
agencies to take advantage of opportunities 
to use new information technology tools in ef¬ 
fective and innovative ways. OTA found that 
there are many such opportunities, but that 
only in a few cases are agencies using innova¬ 
tive tools now, or planning their use. Table 
3-2 shows some examples of information tech¬ 
nology opportunities for five selected agencies. 
Thus, for the Social Security Administration, 
some of the opportunities for change that 
could be facilitated by information technology 
include the use of electronic bulletin boards 
and automated telephone information services 
in field offices to communicate with clients, ex¬ 
panded use of direct deposit, and possibly the 
use of "smart cards" (credit-card-sized elec¬ 
tronic memories) to record theeearnings of each 
worker. While the specific changes postulated 
in table 3-2 are speculative, similar opportu¬ 
nities for productive change with concerted at¬ 
tention to information technology were evi¬ 
dent in virtually every agency examined by 
OTA. 10 

One imperfect index of an agency's ability 
to identify innovative opportunities is the ex¬ 
tent to which it is planning uses for informa¬ 
tion technology beyond the conventional data 
processing and office automation tasks. OTA 
asked agencies to indicate whether they had 
used, were currently using, or were planning 
to use a variety of new information technol¬ 
ogy tools ranging from videoconferencing to 
artificial intelligence. Table 3-3 summarizes 
the responses. The only techniques currently 
used by most agencies are electronic mail and 
audio-conferencing (conference calls), although 
roughly 30 percent of the agencies said they 
plan to use teleconferencing (one-way video, 
two-way audio), optical disk storage, and ex¬ 
pert systems. 


'"See. for exanjDle. J.F.Coates, I nc., Scenarios of FiveFed- 
eral Agencies As Shaped by I nformation Technology, OTA con¬ 
tractor report, J une 21,1985, This report examined and devel¬ 
oped scenarios for the National Oceanic and Atmospheric 
Administration, Bureau of the Census, Internal Revenue Serv¬ 
ice, Environmental Protection Agency, and Social Security 
Administration. 
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Table 3-2.—Opportunities for Use of 
Information Technology at Five Key Agencies 


Agency/possible use of information technology 

Social Security Administration: 

• Use of electronic bulletin boards and automated telephone 

inquiry systems to communicate with clients. 

• Expanded use of direct electronic deposit of social secu¬ 
rity payments. 

• Use of smart cards (credit-card-sized electronic memories) 
for each individual to store his/her earnings records. 

Internal Revenue Service: 

• Electronic submission of tax returns. 

. Increased use of optical character readers to scan returns 
submitted 

• IRS development or certification of software used to pre¬ 
pare tax returns. 

• Use of optical disks to store returns. 

• Use of expert systems to assist i n auditing. 

• Use of computer auditing to closely monitor access to tax¬ 

payer information in order to protect privacy. 

Bureau of the Census: 

ZUse of portable data terminals and computer-assisted tele¬ 
phone interviewing for census workers to gather and trans¬ 
mit information. 

. Use of expert systems to probe data for errors and trends. 

• Overall shift from paper to electronic systems and prod¬ 

ucts, allowing census reports in months instead of four 
years, and facilitating possible shift to rolling census in¬ 
stead of decennial census. 

• More and better data available to public on diskettes. 

Environmental Protection Agency: 

• Integration of databases storing information on air, water, 
land quality, supported by sophisticated database manage¬ 
ment systems, allowing more complex and integrated ana¬ 
lyses of health risks. 

• Use of robots to implant, repair, and retrieve microproc¬ 
essor-based environmental monitoring devices. 

• Use of smart cards for individuals to record their exposure 
to environmental hazards. 

• Use of expert systems to review environmental impact 
statements, and examine data for errors and trends. 

• Public access to computer models used in environmental 
decisionmaking. 

National Oceanic and Atmospheric Administration: 

. Use of supercomputers and expert systems to develop 
20-day weather forecasting capability. 

• Use of microprocessor-based weather data Cllection sta- 
tions to decrease costs and improve forecast accuracy. 

NOTE The specific activities and changes outlined above are intended only as 
suggestive of possible opportunities related to use of information tech¬ 
nology, and not as judgments about their desirability or likelihood 

SOURCE: J F. Coates, Inc , “Scenarios of Five Federal Agencies (1991-1995) as 
Shaped by Information Technology, ” OTA contractor report, June 1985 


Even though a significant minority of agen¬ 
cies are pursuing the use of advanced infor¬ 
mation technology tools, most agencies do not 
seem to be pursuing these (or other) kinds of 
innovations. While it is likely that some agen¬ 
cies are not pursuing information technology 
innovations because they do not expect them 


Table 3-3—Agencies Reporting Current or Planned 
Use of Certain Information Technology Tools 


Technology 

Currently using 

Planning 

1 to use 

# 

‘I/O 

# 

% 

Audio-conferencing . 

. . 84 

62.7 

86 

64.2 

Teleconferencing . . . 

. . 23 

17.2 

42 

31.3 

Videoconferencing. 

. . 10 

7.5 

30 

22.4 

Computer- 





conferencing .... 

. . . 16 

11.9 

29 

21.6 

Teletext. 

. . . 21 

15.7 

26 

19.4 

Videotext. 

.9 6.7 

14 

10.4 

Cable television . . . . 

. . 14 

10.4 

20 

14.9 

Interactive cable. . . 

. . . 3 

2.2 

15 

11.2 

Expert systems/AI . . 

. . 14 

10.4 

43 

32.1 

Electronic mail .... 

. . . 97 

72.4 

115 

85.8 

Voice mail. 

. . . . 9 

6.7 

35 

26.1 

Optical disks. 

.... 6 

i 4.5 

39 

29.1 


NOTE: 134 components reporting 


SOURCE OTA Federal Agency Data Request 

to be useful, many others are either unaware 
of potential useful applications or feel that in¬ 
novation is too risky and likely to come un¬ 
der fire by top agency management, OMB, or 
Congress. There is no formal support mecha¬ 
nism for agencies considering innovative uses 
of information technology to obtain informa¬ 
tion or technical expertise, or to share ex¬ 
periences. 

Failure to connect planning effectively to im¬ 
plementation. Perhaps the most serious flaw 
in the planning process, which often cannot be 
anticipated in advance, occurs at the imple¬ 
mentation stage. Some of these problems are 
the result of circumstances difficult to foresee, 
even though agencies tried to implement their 
plan. "In other cases, the agency is simply not 
organized to carry out the plan, the planning 
staff is isolated from the operational staff, or 
staff pay little attention to the plan. 12 


"For example, a top GAO official said that even though the 
Federal Aviation Administration (FAA) had done a careful plan- 
ningjob, their huge system upgrade was having serious un¬ 
foreseen problems in the "benchmarking" process, where the 
ability of different systems to meet FAA needs was being 
tested. (Warren Reed, GAO, "Coping With Policies and Proce¬ 
dures, " address to Government Computer Expo, Washington, 
DC, June 12, 1985). 

"J .F. Coates, Inc., "Planning for Federal Information Tech¬ 
nology: Continuity and Conflict,"ch. 7 in J.F.Coates, Inc., op. 
Cit., May 24, 1985, based on interviews with agency Officials 
and literature analysis. 
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Finding 2 

The annual 5-year plans currently pub¬ 
lished by the Office of Management and 
Budget lack an analysis of agency or gov¬ 
ernmentwide strategies for using informa¬ 
tion technology to further government mis¬ 
sions. They also do not discuss the security, 
privacy, and civil liberties implications of 
information system plans. Without such in¬ 
formation, congressional oversight of infor¬ 
mation technology management and secu¬ 
rity/privacy issues is much more difficult. 

While the Paperwork Reduction Act of 1980 
required OMB to develop a "5-year plan for 
meeting the automatic data processing and 
telecommunications needs of the Federal Gov¬ 
ernment, " (Section 3505, paragraph 3(E)), the 
resulting documents do not constitute such a 
plan, although they do provide some useful in¬ 
formation. 13 The 1985 report, for example, 
contains: 

• summary data on Federal expenditures 
for information technology; 

• brief advice to agencies on planning; 

• a brief description (one to two pages each) 
of eight of the largest Federal information 
systems and their relation to agency 
mission; 

• some information on technical trends in 
computers and telecommunications, de¬ 
veloped with the assistance of NBS; and 

• an appendix volume that simply lists the 
major tentative acquisition plans of Fed¬ 
eral agencies, primarily for interested 
vendors. 

OMB acknowledges that the 5-year plans 
are not really plans. The 1984 plan, for exam¬ 
ple, notes that the 1983 plan: 

was less a comprehensive plan than a com¬ 
pilation of planning information designed: 1) 
to assist agencies in preparing their plans; and 
2) to inform equipment and services vendors 


"A Five-Year Plan for Meeting the Automatic Data Proc¬ 
essing and Telecommunications Needs of the Federal Govern¬ 
ment, April 1983 (1st cd.), April 1984 |2dcd.), andj une 1985 
(3d cd.). Whilethe publication of the plans is coordinated by 
OMB, they area joint effort between OMB, GSA, and the NBS 
Institute for Computer Sciences and Technology. 


about potential Federal marketing opportuni¬ 
ties. 14 

Further, the 1985 report argues that a gov¬ 
ernmentwide planning document would be un¬ 
workable: 

Government wide planning is made difficult 
by the size and diversity of the Federal Gov¬ 
ernment. This leads us to focus on planning 
efforts at the agency level, since agency goals 
can be specified more clearly than can goals 
for the government as a whole. The task of 
governmentwide planning then becomes one 
of: (1) specifying the rules for agency plan¬ 
ners who develop plans to achieve agency 
goals, (2) reviewing their success in comply¬ 
ing with those rules, and (3) intervening in 
cases where individual agency planning ef¬ 
forts would produce sub-optimal results. '5 

Despite OMB's skepticism about govern¬ 
mentwide planning, there are "macro-level" 
goals for the government that are useful and 
productive to establish-an example is OMB 
goal to refocus more attention on software and 
software maintenance, and to reduce software 
maintenance expenses by 25 percent and full¬ 
time equivalent employees by 5,000, by 1988. 16 

Although clearly there are certain aspects 
of a detailed governmentwide plan that could 
become unwieldy, there are several kinds of 
information not included in these reports that 
could be useful- for congressional oversight 
needs. I n particular, the reports do not shed 
much light on the different strategies used by 
agencies to meet their ADP and telecommu¬ 
nication needs, or on the ways in which the 
agencies are using information technology to 
further their missions. Information of this 
kind could help congressional committees com¬ 
pare the strategies of various agencies, assess 
how information technology shapes new op¬ 
portunities in Federal agencies' missions, over¬ 
see the effectiveness of the Brooks Act and the 
Paperwork Reduction Act, and possibly devel- 


“A Five-Year Plan, 1984, op. cit., p. v. OMB's staff also ac¬ 
knowledged this point at OTA’S work session on information 
technology management, planning, and procurement, J une 26, 
1985. 

‘A Five-Year Plan, 1985, op. cit., p. 17. 

"OMB, Management of the United States Government Fis¬ 
cal Year 1986. 
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op useful measures to amend these acts. It 
could also help agencies communicate with one 
another and pursue joint ventures. 

Gradually, the 5-year plans have become 
more comprehensive. The 1985 plan, for exam¬ 
ple, does include descriptions of eight major 
information systems and their connection to 
the agency mission. However, the description 
is too short to provide much insight, and no 
analysis of agency strategy is included. Fur¬ 
ther, OMB included in the 1985 plan a list of 
the titles of major Federal information sys¬ 
tems, which were gleaned from agencies' sub¬ 
missions in response to Bulletin 85-12 (see pre¬ 
vious finding). Although merely providing the 
titles of information systems is not very help¬ 
ful for oversight purposes, the responses to 
Bulletin 85-12 may be a promising source of 
information for more substantive analysis of 
agency strategies in future 5-year plans. 

There is one area of congressional interest 
that neither the OMB plan nor the agency 
plans are designed to address—the implica¬ 
tions of information technology use for pri¬ 
vacy and civil liberties, as discussed in OTA's 
reports on Electronic Record Systems and In¬ 
dividual Privacy (forthcoming) and Electron¬ 
ic Surveillance and Civil Liberties (October 
1985). Congress could ask for an analysis of 
agency strategies for use of ADP and telecom¬ 
munications that includes identifying major 
potential implications for privacy and civil lib¬ 
erties, and describing agency plans for re¬ 
sponding to these implications. 

Finding 3 

There are serious deficiencies in the infor¬ 
mation available to Congress, and to the 
agencies themselves, about the scope and 
nature of information technology in use in 
the Federal Government. These restrictions 
could present difficulties for effective con¬ 
gressional oversight and agency decision¬ 
making regarding information technology 
use. 

OTA found that two kinds of information, 
currently unavailable, would be useful to Con¬ 
gress in oversight of both information tech¬ 


nology policies generally, and of the manage¬ 
ment of specific agencies: 

1. Broad overview data about trends in in¬ 
formation technology use in the Federal 
Government. These would include, for ex¬ 
ample, both a governmentwide analysis 
and an agency-by-agency breakdown of: 

• the number of mainframes, minicom¬ 
puters, and microcomputers in use; 

• investment in software, both custom 
and off-the-shelf; 

• investment in telecommunications; 

• number and cost of information tech¬ 
nology personnel by function (e,g„ oper¬ 
ations, management, planning, budg¬ 
eting); and 

• historical and projected trends in these 
data. 

This information would enable Congress to 
gain an overall sense of the pervasiveness of 
information technology in government as a 
whole and in the various agencies; to judge the 
urgency of congressional attention in com¬ 
puter-related policy areas, such as computer 
crime; and to assess the rate of change in use 
and cost of technology in government. With 
this information, both Congress and executive 
agencies could evaluate possible changing miss¬ 
ions and opportunities for new services and 
efficiency increases. 

2. An evaluation of the extent to which each 
agency is exploiting innovative informa¬ 
tion technology tools to accomplish its 
missions. Gathering this data could take 
the form of a survey similar to OTA's 
Federal Agency Data Request, which 
asked agencies to indicate whether they 
were using a particular technique and to 
describe that use briefly. This information 
could provide Congress with an "early 
warning" about coming trends in technol¬ 
ogy use and the ability to assess the level 
of innovation in different agencies. Such 
information could also be disseminated to 
allow other agencies to identify similar op¬ 
portunities to further their missions. 

This description of information useful to 
Congress is only a starting point, and clearly 
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Congress itself should determine its informa¬ 
tion needs. However, using the above as a ba¬ 
sis, it is clear that existing information sources 
only begin to meet these needs. 

The apparatus for collecting information 
about Federal use of information technology 
is in flux. Several mechanisms have been dis¬ 
continued or restricted. In particular, after fis¬ 
cal year 1983, GSA stopped systematically 
collecting information regarding the number 
and cost of computers costing less than $50,000. 
On the other hand, GSA's revised inventory 
system is intended to be more accurate than 
the previous one, and on the basis of their first 
reports, the new system is promising as a 
source of data on trends in mainframes and 
more expensive peripherals. (See discussion in 
Finding l. 17 ) Further, OMB's 5-year plans and 
OMB's Bulletin 85-12 are improving as sources 
of information, as noted above. 

However, these improvements still leave 
major gaps in information about software, 
telecommunications, personnel, and use of 
emerging technologies. For example, as noted 
in the previous finding, GSA's annual surveys 
on microcomputer purchase in the government 
provide some information, but do not indicate 
the total number of machines in use. GSA has 
also discontinued its management information 
system for keeping track of communications 
use and expenses. 18 

Perhaps a more troubling issue is that agen¬ 
cies themselves may not have complete infor¬ 
mation about the technology they use to ful¬ 
fill their missions. Each agency is mandated 
by the Paperwork Reduction Act to "syste- 


'Thedata in the previous system were suspect. For exam¬ 
ple, a 1985 GAO report noted: 

GSA’s data base of the government’s inventory of computer 
equipment has been inaccurate for some time. In attempting to 
use the data base to select review sites, GAO initially contacted 
eight computer installations and found errors in the data base 
for six, which prevented GAO from including them in this re¬ 
view. For example, at two sites, equipment listed on the inven¬ 
tory was not installed, and officials did not know whether it had 
ever been installed. 

General Accounting Office, Effective Management of Computer 
Leasing Needed To Reduce Government Costs, IMTEC-85-3, 
Mar. 21 , 1985, p. iii. 

'"Federal Property Management Regulations, Temporary 
Regulation F-502, Federal Register, Oct. 25, 1983. 


matically inventory" its major information 
systems (Section 3506, part (c)(1) of Public 
Law 96-511). Thus, at least in theory, agencies 
should have reliable data on their information 
technology use even if centralized data are in¬ 
adequate. However, there is a clear consensus 
among government ADP experts that most 
agencies do not have such systematic and re¬ 
liable records. 19 

Although OTA acknowledges that gather¬ 
ing data has significant costs and the need for 
information should be carefully evaluated, 
overall there appear to be significant gaps in 
available data that could hamper both effec¬ 
tive policymaking and understanding of the 
information technology transition under way 
in government, as well as decisionmaking by 
the agencies themselves. Further, in the ab¬ 
sence of reliable information, much effort can 
be wasted arguing about estimates. 20 


Finding 4 

Possible actions to improve information 
technology management, planning, and in¬ 
novation include: hearings and studies to 
improve the accuracy and usefulness of 
available information, new or strengthened 
mechanisms for exchanging learning and 
encouraging innovation, and amendments 
to the Paperwork Reduction Act. 

Since the technology and the administrative 
environment for Federal information technol¬ 
ogy are in rapid flux, information technology 
management is a moving target for congres¬ 
sional policy. Yet, it is widely agreed that gov¬ 
ernment is becoming increasingly dependent 
on information and information technology. 
This situation calls for policies and oversight 
procedures that are flexible and anticipatory 
to the greatest extent possible, at each level 


"Reed, op. cit. 

"See, for example, Frank Carr, "Government IRM Fact 
and Fiction, " Government Computer News, Sept. 17,1984. The 
development of reliable data about use of information technol¬ 
ogy need not involve a complete census of the government in 
every case. Authoritative statistical estimates may be quite use¬ 
ful for policymaking purposes. 
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of policymaking for information technology 
management. More specifically, the goal of be¬ 
ing flexible and anticipatory implies that both 
policymakers and the agencies themselves: 

• have reliable information on the use of in¬ 

formation technology, and on the trends 
in that use; 

• assess on an ongoing basis the ways in 

which agencies can use information tech¬ 
nology to further their missions; and 

• facilitate and reward innovation, as well 

as expect occasional failure as a cost of 
attempts to use technology effectively 
and innovatively. 

Though many improvements can be made by 
the executive branch acting alone, Congress 
can facilitate and encourage such actions. 
OTA's analysis indicates that the following ac¬ 
tions warrant consideration: 

Hearings or studies to improve the infor¬ 
mation available for oversight and policy¬ 
making on information technology man- 
agemen t. 

OTA found that, as noted in Findings 2 and 
3, considerable gaps exist in the information 
available that hamper policymaking and over¬ 
sight. Apparently, agencies themselves often 
do not have good inventories of information 
technology use, and the governmentwide in¬ 
ventories are limited in scope and reliability. 
Beyond simply counting and describing the 
systems in use, there is also no clear mecha¬ 
nism to obtain information about the effects 
of information technology use on the mission 
of the agency, and about future plans for in¬ 
formation technology use. Seethe discussion 
in Finding 3, above, for an elaboration of the 
kinds of information that could be useful. 

Hearings or studies (or related activities, 
like conferences and workshops) could be con¬ 
ducted on: 

• The accuracy and usefulness of informa¬ 

tion being collected by GSA and OMB. 
Hearings or studies on this topic could 
also help Congress to define the kinds of 
information that would be most helpful 
in its policymaking and oversight. 


• Information technology planning, focus¬ 
ing on planning for innovative applica - 
tions of information technology in gov¬ 
ernment, and on drawing private sector 
expertise into the Federal planningproc- 
ess. Such hearings or studies could serve 
as forums for agencies and private sector 
organizations to exchange ideas on uses 
of information technology and on plan¬ 
ning techniques, and could facilitate con¬ 
gressional oversight. 

• Information technology management gen¬ 
erally, analyzing the extent to which agen¬ 
cies are using information technology to 
further government goals. " M ost of the 
oversight hearings on the Paperwork Re¬ 
duction Act have concentrated on the pa¬ 
perwork reduction aspects, rather than 
information technology management is¬ 
sues. Congressional hearings could closely 
examine the new OM B circular on infor¬ 
mation resources management (see ch. 2). 
The House Government Operations Sub¬ 
committee on Government Information 
has already held hearings on the informa¬ 
tion dissemination portion of the circular. 

• The effectiveness of the procurement 
process for Federal in formation technol¬ 
ogy. In particular, areas where current 
information is scarce or contradictory 
include the obsolescence of Federal infor¬ 
mation technology, the effect of the Com¬ 
petition in Contracting Act on ADP pro¬ 
curements, the extent to which current 
procurement processes present a barrier 
to effective and innovative use of infor¬ 
mation technology, and the staffing and 
training in procurement offices that han¬ 
dle ADP. 

New or strengthened mechanisms to en¬ 
courage innovation in information tech¬ 
nology use. 


“A set of hearings with a similar goal was held more than 
a decade ago. See Federal Information Systems and Plans— 
Federal Use and Development of Advanced Information Tech¬ 
nology, hearings before a Subcommittee of the House Commit¬ 
tee on Government Operations, April, J une, and J uly 1973, and 
J anuary and February 1974. 
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OTA found that there is a need for more mech¬ 
anisms in the government whereby agencies 
can share information about effective uses of 
information technology. Clearly, this already 
happens in a variety of ways—at conferences, 
multi-agency meetings, and educational pro¬ 
grams, through publications distributed by 
agencies, through NBS documents, and through 
personal contacts. However, NBS, OMB, and 
GSA could be given stronger mandates to col¬ 
lect and distribute documentation of innova¬ 
tive applications (the hearings described above 
could become a forum for sharing such ideas 
and plans). 

Based on much of the evidence cited in the 
"background" and "findings" sections above, 
it is clear that many agencies need assistance 
in developing effective planning processes and 
identifying opportunities for information tech¬ 
nology innovations. OMB, GSA, and the Gen¬ 
eral Accounting Office (GAO) have recognized 
this need, in part, by providing handbooks and 
other guidance material on planning. These are 
promising initiatives, and Congress may wish 
to oversee the adequacy of these support 
efforts. 

Another option would be to consider desig¬ 
nating a formal resource center for informa¬ 
tion technology innovation and planning, ei¬ 
ther at GSA or NBS, and/or use personnel 
detailed from line agencies on a rotating ba¬ 
sis. Such a center could provide training for 
agency staff in planning related to informa¬ 
tion technology, and could also establish a for¬ 
mal mechanism-such as an interagency com¬ 
mittee or regular series of conferences—to 
allow agencies to coordinate their planning ef¬ 
forts and share expertise. 

Another kind of support that agencies need 
in developing long-range plans is information 
on technology trends—e.g., the processing 
speeds and architectures one can expect from 
computers 3 or 5 years hence. Until recently, 
the I nstitute for Computer Sciences and Tech¬ 
nology (ICST) at NBS provided such support 
for agencies. 22 However, because of recent dis- 

"See, for example, two useful documents produced by the 
Institute for Computer Sciences and Technology: Futureln- 
formation Processing Technology1983, special publications No. 
500-103, August 1983; and Future Information Technology 
1984: Telecommunications, No. 500-119, December 1984. 


agreements over the budget at NBS, the agen¬ 
cy will no longer contract for any original re¬ 
search in technology trends, but will instead 
rely on published literature and subscriptions 
to consulting services. While many of these 
services provide excellent technology trend 
data, the Federal Government's information 
technology use tends to be different from that 
of the private sector in several ways—includ¬ 
ing extremely large databases and a more di¬ 
verse mix of vendors—that may make it use¬ 
ful to have customized trend information. 

OMB itself argued for a strong centralized 
technology trend function in its 1984 5-year 
plan: "It therefore makes sense for agencies 
to band together to fund a cooperative fore¬ 
cast, which concentrates on areas of mutual 
interest. 123 And indeed, it is well within the 
Brooks Act mandate for NBS to provide such 
technical resources to the agencies. If Con¬ 
gress agrees that such a resource is appropri¬ 
ate, it may wish to strengthen the function at 
NBS or designate a similar function in some 
other agency. In addition, the administration 
has repeatedly proposed to eliminate or drasti¬ 
cally cut back ICST at NBS, 24 and Congress 
and the executive branch may want to exam¬ 
ine the implications of this move for planning 
support, as well as for information security 
support and other areas (see ch. 4). 

Another set of possibilities for encouraging 
innovation and effective use of information 
technology involves the procurement process. 
Enhanced training for ADP procurement of¬ 
ficers, and for managers who are planning and 
implementing large-scale information technol¬ 
ogy projects, is one clear option to encourage 
sharing of expertise. GSA could enlarge its 
current small program to train procurement 
officers in ADP, or programs could be added 
through, for example, the Office of Personnel 
Management or the Department of Agricul¬ 
ture's Graduate School. Some of the private 
training/seminar organizations in the Wash¬ 
ington area do address ADP procurement is¬ 
sues to some extent, although these often 
focus on the process from the vendor's per- 


*'A Five-Year Plan, 1984, op. cit., p. 14. 

"EricFredell, "White House Again Targets ICST, "Gov- 
ernment Computer Na/vs, Mar. 8, 1985. 
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spective. GSA suggests that this enhanced 
training does not need to make procurement 
officers into computer experts, or ADP man¬ 
agers into procurement specialists, but sim¬ 
ply needs to provide each with a layman's un¬ 
derstanding of the other field. In helping these 
officials to develop the resourcefulness neces¬ 
sary to get through the procurement process 
successfully, it could be useful as part of the 
training to present a workshop on experiences 
with actual acquisitions, both effective and 
problematic, in order to give students an un¬ 
derstanding of the team approach to acquisi¬ 
tion, pitfalls to avoid, and possible innova¬ 
tions. 25 

One controversial option suggested by the 
Department of Commerce 26 is that Congress 
could experimentally exempt certain agencies 
(or parts of agencies) from the bulk of statutes 
and GSA rulings on procurement for a fixed 
period of time. Such an experiment could al¬ 
low the agency to develop and try different 
techniques for acquiring information technol¬ 
ogy. Clearly, Congress would want to choose 
agencies whose track record in planning and 
procurement is already good, and both Con¬ 
gress and GSA should watch the experiment 
closely, while still allowing the agency flexi¬ 
bility. The outcome of such an experiment 
should be evaluated not just on the net cost 
to the government compared to more tradi¬ 
tional procurement procedures, but on the ef¬ 
fectiveness of the agency in using information 
technology to accomplish its mission. 

Another interesting idea for sharing ADP 
expertise raised by Robert Head in his 1982 
monograph is to establish the equivalent of a 
rapid-response troubleshooting team for infor¬ 
mation technology to help agencies plan for 
and implement major projects, either at the 
behest of the agency, OMB, or Congress. Head 
writes : 27 


“Francis McDonough, General Services Administration, 
letter to OTA, September 1985. 

"J immie D. Brown, Director for Management and Informa¬ 
tion Systems, Department of Commerce, letter to OTA, Oct. 
2,1985. 

“Robert Head, Federal Information Systems Management, 
op. tit., pp. 36-37; see also General Accounting Office, Govern¬ 
ment- Wide Guidelines and Management Assistance Center 
Needed T o I improve ADP Systems Devel opment, AFMD-81 - 

20, Feb. 20. 1981. 


The computer SWAT team would be avail¬ 
able to aid agency managers in planning ma¬ 
jor new projects to avoid potential schedule 
pitfalls. Work here might include the instal¬ 
lation of SDLC [systems development life cy¬ 
cle] procedures to strengthen management 
control of large projects, the application of 
software engineering principles, assistance in 
specification writing, and the selection and 
supervision of outside contractors. This 
would be one key function. 28 

The second function would be to enter into 
systems projects that have deteriorated to 
the point where the agency has obviously be¬ 
come unable to salvage them. In such situa¬ 
tions those responsible for managing the 
project are typically defensive. In this case, 
the computer SWAT team could provide not 
only technical assistance but also a "damage 
assessment" by advising Congress and other 
concerned parties about the true nature of 
the project's difficulties. 

OMB or GSA could develop such an inter¬ 
disciplinary team and establish guidelines for 
their activities. The team would not neces¬ 
sarily be free-standing; rather it could be com¬ 
posed of experienced officials from other agen¬ 
cies who serve on a rotating or ad hoc basis. 

Amendments to the Paperwork Reduc¬ 
tion Act to provide a stronger and more 
detailed mandate for information technol¬ 
ogy planning and management in the ex¬ 
ecutive branch. 

OTA found that information technology plan¬ 
ning warrants more specific attention both in 
legislation and oversight. A first step might 
be to consider strengthening and refining the 
planning requirement included in the Paper¬ 
work Reduction Act of 1980, with specific 
legislative guidance for the content of 5-year 
plans. Aside from mandating that the plan be 
updated each year, as proposed in the Paper¬ 
work Reduction Act Amendments of 1984 
(and as is now the case, due to OM B's initia¬ 
tive), the guidance could specify that the plan 


‘"This kind of assistance is already available to agencies 

from GSA's Office of Software Development and Information 
Technology and the Federal Computer Performance Evaluation 
and Simulation Center (FEDSIM), which is under the auspices 
of the Air Force but performs contract services for other 
agencies. 
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include analysis of the impacts of information 
technology on the missions of the agencies, 
and on civil liberties and fair information 
practices. 

F urther, Congress may wish to examine in 
more detail current trends in the information 
available on information technology manage¬ 
ment, determine what kinds of information are 
vital to congressional oversight and agency 
decisionmaking, and request or direct the nec¬ 
essary information collection efforts. The 
Paperwork Reduction Act could, for example, 
require both a census of microcomputers and 
an inventory and description of major sys¬ 
tems, and could require that GSA compile a 
more comprehensive report describing this in¬ 
formation and the underlying trends. It would 
also be useful to establish some kind of inven¬ 
tory of software resources, since software has 
long since outstripped hardware in lifecycle 
cost and significance to programs. 

OTA recognizes that, true to the IRM con¬ 
cept, there are costs associated with collect¬ 
ing such information. OMB and GSA officials, 
for example, have repeatedly expressed a hes¬ 
itancy to collect further information because 
agencies already feel oppressed by the current 
information collection guidelines. In particu¬ 
lar, agencies may resist providing information 
about microcomputers, si nee the unit cost is 
so low. Clearly, these arguments must be 
weighed against the potential value to Con¬ 
gress of having more complete and reliable in¬ 
formation about trends in technology use. 

Amendments to the Paperwork Reduction 
Act could also give individual agencies, in 
addition to OMB, a mandate for long-range 
planning. While agencies are currently re¬ 
quired to plan, by OMB directives, a congres¬ 
sional mandate-and perhaps allocation of 
modest resources-may raise the visibility and 
effectiveness of the agency information tech¬ 
nology planning process. 

Other options would clarify the Paperwork 
Reduction Act mandate for general informa¬ 


tion technology management. I n the 98th Con¬ 
gress, several aspects of S. 2433 and H.R. 
2718, proposed amendments to the Paperwork 
Reduction Act, would have clarified some of 
the definitions in the act, combined GSA's 
ADP and telecommunications funds, mandated 
that OMB's 5-year plan be updated annually, 
and specified further paperwork reductions. 
An effective congressional role in information 
technology management is difficult to con¬ 
struct, si nee there i s a danger that Congress 
may be perceived as reaching too far into the 
management prerogatives of the executive 
branch. However, should Congress decide to 
take a more active role in this area, it could 
strengthen and expand the language of the 
Paperwork Reduction Act, setting forth goals 
for information technology management in or¬ 
der to define more specifically what is meant 
by IRM and what kinds of coordination and 
management structure the agencies should 
pursue. Such a congressional mandate may 
motivate quicker action by the agencies. While 
the act gives a very specific mandate for pa¬ 
perwork reduction, it gives only a bare mini¬ 
mum framework for information technology 
management. 

Another possible option is to designate an 
additional assistant secretary for some agen¬ 
cies, whose primary responsibility would be in¬ 
formation resources management. Since most 
agencies have designated their existing assis¬ 
tant secretary for administration as their sen¬ 
ior official for IRM, many of these officials 
have been forced either to neglect I RM or to 
delegate the responsibilities. Establishing a 
new assistant secretary for IRM would ensure 
high-level visibility for the function, although 
it would also have clear costs in money and 
bureaucratic complexity. Such a new official 
also might have less authority than an assis¬ 
tant secretary for administration who also has 
jurisdiction over budgets, contracts, and fa¬ 
cilities. 
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Chapter 4 

Information Systems Security 


SUMMARY 


This chapter examines needs and policies for 
the protection of Federal data and information 
systems from a variety of problems, ranging 
from technical failures to unauthorized use or 
manipulation of data. 

Concerns about the security of information 
systems began to become prominent in the 
mid to late 1960s, particularly in military and 
national security agencies of the government. 
Generally, while the Department of Defense 
(DOD), and particularly the National Security 
Agency (NSA), has developed a great deal of 
technical expertise in this area, the civilian 
agencies have lagged in awareness. In the last 
decade, however, concerns about both privacy 
and hackers have elevated the overall visibil¬ 
ity of this issue. 

The basic policy document for government¬ 
wide information security is the Office of Man¬ 
agement and Budget (OMB) Circular A-130 
issued in December 1985 (replacing Circular 
A-71, Transmittal Memorandum No. 1, issued 
in 1978), which requires agencies to designate 
security officers, conduct risk analyses, and 
take other appropriate steps to protect their 
information systems. In September 1984, the 
White House issued National Security Deci¬ 
sion Directive 145 (NSDD 145), which essen¬ 
tially attempts to bring together the separate 
paths of civilian and military information sys¬ 
tems security, with NSA serving as a resource 
and coordinating point for all national securi¬ 
ty-related applications in the Federal Govern¬ 
ment. The scope of NSDD 145 and NSA's au¬ 
thority is based on a definition of "information 
sensitive for national security reasons" which 
has not yet been worked out, but is likely to 
be far broader than classified information 
alone. 

OTA's major findings in this area are: 

• The government faces fundamentally new 
levels of risks in information security be¬ 


cause of increased use of networks, in¬ 
creased computer literacy, an explosion 
in microcomputer use and decentralized 
data processing capabilities, and increased 
dependency on information technology 
overall. 

• Although there has been some progress 
in the past 5 to 10 years, there is wide¬ 
spread evidence that Federal policy re¬ 
quiring the use of appropriate information 
systems security measures has been in¬ 
effective. The General Accounting Office 
(GAO) reports and the OTA Federal Agen¬ 
cy Data Request indicate that agencies 
often are not taking the actions mandated 
by OMB Circulars A-71 and A-130, such 
as performing risk analyses and screen¬ 
ing personnel who work with sensitive ap¬ 
plications. For example, for systems that 
process sensitive but unclassified infor¬ 
mation, OTA found that about one-quarter 
of the agencies responding do not screen 
personnel, about one-half do not perform 
a management review of sensitive appli¬ 
cations, and about 40 percent do not use 
audit software or restrictions on dial-up 
access for any of these systems. I n addi¬ 
tion, about 40 percent of agencies have 
not conducted a risk analysis in the last 
5 years, about 75 percent do not have an 
explicit security policy for microcomput¬ 
ers, and about 60 percent do not have (and 
are not developing) contingency plans in 
the event of disruption of mainframe com¬ 
puters. 

• Three key factors inhibit appropriate Fed¬ 
eral information security measures: 1) 
competition for resources in Federal pro¬ 
grams, which limits spending for a "latent" 
issue like security; 2) a lack of awareness 
or motivation among agency personnel 
and top management; and 3) an absence 
of clear guidance on appropriate security 
measures. 
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• As NSDD 145 is implemented, it becomes 
increasingly clear that NSA and the com¬ 
mittees guiding its implementation will 
play a significant if not dominant role in 
all aspects of information security in the 
Federal Government, whether or not the 
information is classified. Thus, NSDD 
145 is likely to result in stronger govern¬ 
mentwide leadership in information secu¬ 
rity policy; however, concerns have been 
expressed that it puts the national secu¬ 
rity community in an unusual influential, 


if not controlling, position on a key aspect 
of the Nation's information policy. 

• Possible actions to improve Federal infor¬ 
mation systems security include: more in¬ 
tensive congressional oversight, changing 
budget procedures with information secu¬ 
rity receiving higher priority and visibil¬ 
ity, designating a civilian agency to be 
responsible for security training and tech¬ 
nical support in the nonmilitary sector of 
government, and revising and clarifying 
NSDD 145. 


INTRODUCTION 


This chapter and the next ("Chapter 5: Com¬ 
puter Crime") are closely tied, in that they 
both focus on the integrity of information 
systems, although they emphasize different 
aspects of the problem. There are four general 
kinds of measures to protect information sys¬ 
tems: 1) technical measures, such as crypto¬ 
graphy; 2) administrative measures, such as 
making sure disbursements cannot be author¬ 
ized by only one person; 3) physical measures, 
such as locking up diskettes; and 4) legal reme¬ 
dies to discourage abuse and prosecute perpe¬ 
trators. This chapter discusses primarily the 
technical, administrative, and physical secu¬ 
rity measures, while chapter 5 discusses com¬ 
puter crime legislation.' 


'It should be noted that the management of information se¬ 
curity is one important aspect of good overall information tech- 


Finally, though this chapter addresses in¬ 
formation systems security considered broad¬ 
ly-including both computers and telecommu¬ 
nications—computer security is analyzed in 
more detail than telecommunications security. 
A related OTA study will provide further anal¬ 
ysis of telecommunications security issues. 2 


nology (or information resources) management. It is an axiom 
of the information technology management field that effective 
information security cannot be independent of other aspects 
of management, or relegated to technical security experts. 
Rather, the managers and users of information systems must 
consider security throughout the plarming, implementation, and 
use of the systems. Thus, although this chapter focuses its anal¬ 
ysis on one goal of information technology management- 
security—it snould be emphasized that good overall manage¬ 
ment and good security practices are intertwined. 

The study, "New Communication Technologies: Implica¬ 
tions for Privacy and Security," is scheduled for completion 
in fall/winter 1986. 


BACKGROUND 


Attention began to focus on the security of 
unclassified information systems in the Fed¬ 
eral Government in the mid to late 1960s. Im¬ 
portant factors that led to this concern include 
the development of multi-user ("resource shar¬ 
ing") computer systems, and the growing in¬ 
terest in privacy and government data banks. 3 


'An important early document is a report by the Defense 
Science Board Task Force on Computer Security, "Security 
Controls for Computer Systems, " edited by Willis H. Ware. It 
was originally issued in classified form in 1967, and later declas- 


ln addition, a number of notorious computer 
crimes in the 1970s reinforced the fact that in¬ 
formation systems do indeed have significant 
vulnerabilities. 4 


sified and published for the Office of the Secretary of Defense 
by Rand Corp., Santa Monica, CA, 1979. For more historical 
information see also L.G. Becker, Congressional Research Serv¬ 
ice, "Computer Security: An Overview of National Concerns 
and Challenges," report No. 83-135 SPR, Feb. 3, 1983. 

‘See U.S. Department of J ustice, Bureau of J usticeStatis¬ 
tics, Computer Crime Computer Security Techniques. Septem¬ 
ber 1982. The document was prepared by SRI I nternational un¬ 
der a contract with the Department of J ustice. 
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The threats and problems faced by comput¬ 
er systems include: 5 

1. Mistakes, both errors and omissions, that 
result in loss of data integrity. Examples: 
keyboard entry errors, programming errors, 
bringing magnets near storage media. 

2. Dishonest employees with self-serving 
goals (usually economic) committing acts 
they prefer not to be noticed. Examples: 
"Data diddling" to generate unauthorized 
disbursements; using privileged informa¬ 
tion for personal gains. 

3. Loss or disruption to data-processing ca¬ 
pability from any cause. Examples: fire, 
flood, hurricanes, civil unrest, falling air¬ 
craft (for computer installations near air¬ 
ports), and loss of supporting services and 
facilities. 

4. Disgruntled employees who commit dam¬ 
aging acts without economic or other self- 
serving goals. Examples: employees ac¬ 
cessing information after they quit; de¬ 
stroying essential tapes; or planting "logic 
bombs" of various sorts, which disrupt 
the computer's operating system at a 
specified time. 

5. Outsiders who, through some illicit act, 
accidentally or intentionally cause loss of 
data integrity or loss of or disruption to 
the means of processing those data. Ex¬ 
amples: hackers gaining unauthorized ac¬ 
cess and/or tampering with files, industri¬ 
al espionage via eavesdropping on data 
transmissions. 

Table 4-1 lists some of the common measures 
that can be used to protect information sys¬ 
tems from these problems. It is not exhaus¬ 
tive, but suggests the range of safeguards that 
are available. I n order to match the value of 
data and the differing risks with appropriate 
safeguards, information security experts com¬ 
monly use a technique known as risk analy- 

'Adapted from Robert H. Courtney, J r„ and Mary Anne 
Todd, "Problem Definition: An Essential Prerequisite to the 
Implementation of Security Measures," paper prepared for pres¬ 
entation to the Second International Congress and Exhibition 
on Computer Security, Toronto, Sept. 10-12, 1984, p. 4. Court¬ 
ney argues that these problems are listed in order of decreas¬ 
ing economic importance-i. e„ that mistakes are the most im¬ 
portant problem, and outsiders the least—although others 
would rank the problems differently. 


Table 4.1.—Common Administrative, Physical, 
and Technical Information Security Measures 


Administrative security measures: 

• Background checks for key computer employees. 

• Requiring authority of two employees for disbursements. 

. Requiring that employees change passwords every few 
months, do not use the names of relatives or friends, and 
do not post their passwords in their offices. 

Z Removing the passwords of terminated employees quickly. 

• Providing security training and awareness programs. 

• Establishing backup and contingency plans for disasters, 
loss of telecommunications support, etc. 

• Storing copies of critical data off-site. 

• Designating security officers for information systems. 

• Developing a security policy, including criteria for sensi¬ 
tivity of data. 

• Providing visible upper management support for security. 
Physical security measures: 

• Locking up diskettes and/or the room in which microcom¬ 
puters are located. 

• Key locks for microcomputers, especially those with hard 
disk drives. 

• Requiring special badges for entry to computer room. 

• Protecting computer rooms from fire, water leakage, power 
outages. 

• Not locating major computer systems near airports, load¬ 
ing docks, flood or earthquake zones. 

Technical security measures: 

• Audit programs that log activity on computer systems. 

• Security control systems that allow different layers of ac¬ 
cess for different sensitivities of data (e. g., each level re¬ 
quires a different password). 

• Encrypting data when it is stored or transmitted, or using 
an encryption code to authenticate electronic transactions. 

• Techniques for user identification, ranging from simple 
ones such as magnetic stripe cards to more esoteric "bi¬ 
ometric” techniques, which rely on hand or eye scanners 
(just beginning to be used). 

• “Kerne! ’-based operating systems, which have a central 
core of software that is tamperproof and controls access 
within the system.* 

• “Tempest” shielding that prevents eavesdroDDers from 
picking up and deciphering” the signals given off by elec¬ 
tronic equipment.* 

Generally used only in military or other national security applications 
SOURCE Office of Technology Assessment 

sis. It is a variant of risk analysis techniques 
that have gained prominence in the last two 
decades to help make decisions about envi¬ 
ronmental issues and other technological haz¬ 
ards. 6 ! n general, a risk analysis for an in- 


The National Science Foundation’s Technology Assess¬ 
ment and Risk Analysis Program has funded and coordinated 
much of the pioneering work in this area. See, for example, V. 
Covelloand M. Abernathy, "Risk Analysis and Technological 
Hazards: A Policy-Related Bibliography, "National Science 
Foundation (mimeograph), 1982; National Research Council, 
Committee on Risk and Decision Making, Risk and Decision 
Making: Perspectives and Research (Washington, DC: National 
Academy Press, 1982). 
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formation system involves answering the 
following questions: 

1. What are the threats or vulnerabilities 
that this system faces? 

2. How likely are those threats or vulnera¬ 
bilities? 

3. What would be lost? 

4. What are the alternatives for protecting 
against these threats, and how does the 
cost of the alternatives compare with the 
size and likelihood of losses if the system 
is not protected? 

OMB'S Circular A-130 (and its predecessor, 
Circular A-71, Transmittal Memorandum No. 
1) requires risk assessments for information 
systems at least every 5 years, although it 
does not specify what constitutes a risk as¬ 
sessment or an information system. Risk anal¬ 
ysis techniques for information systems range 
from an informal and brief qualitative proce¬ 
dure for a small microcomputer system, to a 
highly quantitative, in-depth examination of 
a major computing center. The latter are typi¬ 
cally performed by a consultant for $50,000 
to $250,000 and up. In the past few years, sev¬ 
eral vendors and research labs have developed 
risk analysis procedures that are automated 
and can be considerably cheaper. 7 

A risk analysis technique published by the 
National Bureau of Standards (NBS) in 1979 
is the basis of many risk analyses performed 
in government and in the private sector. The 
procedure, published in Federal Information 
Processing Standards Publication 65, involves 
identifying potential threats, and then devel¬ 
oping an "annualized loss expectancy" for 
each threat. For example, one might estimate 
that a fire in the tape storage room would 
cause $300,000 in losses (e.g., including dam¬ 
age, denial of use, and possible disclosure), 
that it would occur (within an order of magni¬ 
tude) once every 30 years, and that the resul¬ 
tant annualized loss estimate was $10,000 (i.e„ 
$300,000/30). Once annualized loss estimates 

‘See, for example, Suzanne Smith and J.J.Lim, Los Ala¬ 
mos National Laboratory, "A Framework for Generating 
Automated Risk Analysis Expert Systems," presentation at 
Federal Information Systems Risk Analysis Workshop, Mont¬ 
gomery, AL, J an. 22, 1985. 


are determined using this system, one can 
compare them to the costs of implementing 
protective measures. For example, the cost for 
afire control system for the tape storage room, 
amortized over its expected lifetime, might be 
$5,000 per year. If so, the analysis would sug¬ 
gest that such a system ought to be considered. 

Although risk analyses modeled on the NBS 
system are widely used, they have distinct 
drawbacks. In particular, the process can be¬ 
come quite lengthy and include a great deal 
of personal judgment. Many critics have noted, 
for example, that estimating the frequency of 
events that have never occurred is particularly 
difficult. Thus, simpler and less quantitative 
techniques for risk analysis are becoming more 
popular, especially for smaller information sys¬ 
tems. The U.S. Geological Survey (USGS), for 
example, uses a questionnaire-based system 
to identify possible risks and to determine 
whether appropriate protective measures have 
been considered. Table 4-2 provides an exam¬ 
ple of the format. The principle behind the 
USGS system is to identify a set of baseline 
measures and to ensure that system managers 
have considered implementing them. They are 
thus informed and accountable for the secu¬ 
rity of their systems. 


Federal Information Security 

Though there are common aspects, there is 
wide variation among and within Federal 
agencies in the kinds of information technol¬ 
ogy they use, in the nature of their informa¬ 
tion security problems, and in their awareness 
of those problems. Even within agencies (e.g., 
DOD), different functions or installations will 
range from being at the cutting edge of sophis¬ 
tication in information security to very mini¬ 
mal awareness and protective measures. And 
clearly, the national security community is dis¬ 
tinctly different from much of the rest of gov¬ 
ernment in the threats it faces and in its so¬ 
phistication with regard to computer security. 

Largely because of this difference in sophis¬ 
tication, the military (including parts of civil¬ 
ian government that generate classified infor- 
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Table 4-2.—illustrative ADP Security—Risk Assessment Questions 


Site location — 


Risk is 

Controls and procedures Yes acceptable Corrective action 

1. Has the responsibility for the protection of each and 
every ADP resource (computer system, data, 

programs, etc.) been explicitly assigned?.— _ _ 

2. Are procedures in place to inform employees what 
resources they are expected to protect and from 
what hazards, what variances they are to note, and 

what corrective action they are to take?.— _ _ 

3. Are procedures in place to ensure the timely and 

complete separation of terminated employees?.— _ _ 

4. Is there a policy consistent with generally accepted 

practice about who may access and update data?.— _ _ 

5. Where indicated by the sensitivity of the resource 
and size of user population, is the policy enforced 

by the system?. — _ _ 

6. Is each individual user of the system uniquely 

identified?. — _ _ 

7. Is there a procedure (e.g., password, magnetic-stripe 
card) to authenticate the identity of the individual 

user of the system?.— _ _ 

8. Are users restricted to only those resources (e.g., 
data sets, records or segments, fields, transactions, 

etc.) required for their job?.— _ _ 

SOURCE U S Geological Survey 


mation) and civilian sides of government have 
taken different paths in responding to escalat¬ 
ing security concerns. The military side has 
been pursuing information security (particu¬ 
larly telecommunications, but increasingly 
computer security also) for much longer than 
other parts of government. It has powerful in¬ 
stitutions and a great deal of technical exper¬ 
tise in this area. 8 Much of this expertise has 
traditionally been centered in NSA, whose 
mission includes both gathering intelligence 
from international telecommunications trans¬ 
missions, and protecting U.S. transmissions 
from interception, alteration, and disruption. 

Beginning in the 1970s, the concern on the 
military side broadened into several major 
programs and Presidential directives for pro¬ 
tecting national security information. A key 
milestone was President Carter's Presidential 


'See Sanford Sherizen, "Federal Computers and Telecom¬ 
munications: Security and Reliability Considerations and Com¬ 
puter Crime Legislative Options," OTA contractor report, Feb¬ 
ruary 1985. 


Directiv^National Security Council-24 (PD- 
24), issued on February 16, 1979. The direc¬ 
tive focused on developing telecommunica¬ 
tions security safeguards for classified infor¬ 
mation as well as unclassified government and 
private sector information that would be "use¬ 
ful to an adversary. " It gave joint responsi¬ 
bility to the Secretary of Defense (delegated 
to NSA) and to the Secretary of Commerce 
(delegated to the National Telecommunica¬ 
tions and Information Administration (NTIA)) 
to monitor telecommunications security needs 
in government and the private sector, and to 
propose a national policy for cryptography. 9 
Eventually, NTIA's role in information secu¬ 
rity was phased out during the Reagan Ad¬ 
ministration. 

For unclassified information unrelated to na¬ 
tional security, the motivations for address¬ 
ing information security are quite different. 


'Presidential Directive/National Security Council-24 (un¬ 
classified extract), "National Telecommunications Protection 
Policy, " Feb. 16. 1979. 
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Rather than facing a sophisticated adversary 
who seeks to obtain protected information, ci¬ 
vilian agencies (and many parts of the military 
agencies as well) face a diffuse set of problems, 
ranging from computer-related embezzlement 
of funds by employees to unauthorized use of 
sensitive personal or proprietary data, to sim¬ 
ple errors and omissions. The pattern of pol¬ 
icy development for protection of this kind of 
information has been similarly diffuse. In the 
late 1960s and early 1970s, congressional con¬ 
cerns about privacy led to the Privacy Act of 
1974, which controls the collection and use of 
personal information by Federal agencies. 

One of the most significant policy actions 
for governmentwide information security took 
place in 1978, when OMB issued Transmittal 
Memorandum #1 (TM-1) to its Circular A-71 
on the management of Federal information 
technology. TM-1 requires agencies to imple¬ 
ment a computer security program. This pro¬ 
gram includes: 1) designating a security officer 
for each installation, 2) establishing personnel 
screening procedures for those who work with 
sensitive computer systems, 3) establishing 
procedures for evaluating the sensitivity of 
applications and certifying that systems are 
appropriately secure, 4) performing periodic 
audits and risk analyses for each computer in¬ 
stallation, and 5) establishing contingency 
plans for disruptions to information systems. 
The memorandum also assigns to Federal 
agency heads the responsibility for assuring 
appropriate levels of security in their informa¬ 
tion systems; and it directs the General Serv¬ 
ices Administration (GSA) and NBS to de¬ 
velop policy guidelines and standards for 
Federal information systems security. 

Table 4-3 highlights the policy documents 
that represent the current policy framework 
for information systems security. In addition, 
individual agencies, particularly DOD and in¬ 
telligence agencies, have information security 
policies that go beyond the governmentwide 
guidelines. See appendix 4A at the end of this 
chapter for some examples. 

Since the early 1980s, there has been a resur¬ 
gence of interest in information security prob- 


Table 4-3.—Key Federal Policy Documents Affecting 
Information Systems Security 


Brooks. Act of 1965 (Public Law 89.306): 

Gives OMB and GSA joint authority to set policy on Fed¬ 
eral information technology; Commerce/NBS provides sup¬ 
porting standards, research, and technical assistance. 

Privacy Act of 1974 (Public Law 93.579): 

Restricts collection and use of personal information by 
agencies; requires them to take precautions to prevent 
unintended disclosure of personal information. 

OMB Circular A-71, Transmittal Memorandum #1, 1978: 

Requires agencies to establish a computer security pro¬ 
gram, including periodic risk analyses, management cer¬ 
tification of sensitive applications, and designation of com¬ 
puter security officers. 

Presidential Directive/National Security Council-24 (PD-24), 
“National Telecommunications Protection Policy, ” Feb. 16, 
1979 (superseded by NSDD 145): 

Gives Defense/NSA and Commerce/NTIA joint responsibil¬ 
ity to monitor telecommunications security needs in gov¬ 
ernment and private sector, and to propose cryptography 
policy. NTIA’s role was ultimately phased out. 

Paperwork Reduction Act of 1980 (Public Law 96.511): 

Endorses the concept of information resources manage¬ 
ment, establishes the Office of Information and Regulatory 
Affairs at OMB, and charges that office with evaluating 
agency information management and setting and coordi¬ 
nating related policies. 

Federal Managers Financial Integrity Act of 1982 
Public Law 97.255): 

Requires agencies to examine their internal control sys¬ 
tems and report deficiencies and plans for correcting those 
deficiencies to the President and Congress. 

National Security Decision Directive 145, “National Policy on 
Telecommunications and Automated Information Systems 
Security, ” issued by the White House, Sept. 17, 1984: 

Sets NSA as the focal point for both military and civilian 
information security related to national security. NSA is 
to assist an interagency committee (NTISSC) in develop¬ 
ing and coordinating policies, evaluating computer and 
telecommunications security, and reviewing and (for 
telecommunications) approving budgets for computer and 
communications security efforts throughout government. 
OMB Circular A-130, “Management of Federal Information 
Resources” Dec. 12, 1985 (supersedes A-71): 

Reinforces provisions of A-71, updates A-71 to acknowl¬ 
edge microcomputers, Federal Managers’ Financial In- 
teqrity Act, NSDD 145. 

SOURCE Office of Technology Assessment 

lems and policies, both for national security- 
related and other Federal systems. Some of 
this interest is clearly tied to the recent inci¬ 
dents of computer "hackers" gaining unau¬ 
thorized access to computer systems, ranging 
from the Memorial Sloan-Kettering Cancer 
Center to Los Alamos National Laboratory. 
Although hackers have often brought atten¬ 
tion to computer security issues, they appear 



65 


to be only a small part of the overall computer 
security problem. Security experts are nearly 
unanimous in their view that the more signif¬ 
icant security problem is abuse of information 
systems by those authorized to use them, 
rather than by those trying to penetrate the 
systems from outside. 10 (See ch. 5 for further 
discussion of computer crime.) 

Other factors that have contributed to re¬ 
newed interest in information systems secu¬ 
rity in the 1980s include a growing awareness 
of the Federal Government's dependence on 
information technology, and an increasing 
sense that existing policy in this area is inade¬ 
quate. For example, a 1982 GAO report said 
that Circular A-71 has not been implemented 
effectively because it failed to: 1) provide clear 
guidance to agencies on minimum safeguards 
needed, 2) clarify the relationship between 
measures for national security information 
and measures for other kinds of information, 
and 3) provide guidance on telecommunica¬ 
tions security.'* 

In part as a result of this renewed interest 
and controversy over information systems se¬ 
curity policies, the executive branch has taken 
two very significant steps to change these pol¬ 
icies. The first was NSDD 145, issued by the 
President on September 17, 1984, which gives 
the NSA new authorities and responsibilities 
for a wide range of military and nonmilitary 
information security functions. It is to "act 
as the government focal point for cryptogra¬ 
phy, telecommunication systems security, and 


"’See, for example, J oel Zimmerman, 'TheHuman Side of 
Computer Security, " Computer SecurityJ ournal, summer 1984, 
pp. 7-19. The relative importance of "outsiders” penetrating 
information systems is viewed by some as a critical difference 
between military and civilian information systems. Because per¬ 
sonnel running military systems have usually been more care¬ 
fully "cleared" than those in civil agencies, and because the po¬ 
tential adversaries seeking national security information are 
much more sophisticated, military computer security experts 
often emphasize protection from outside penetration. See "Com¬ 
puter Security, The Defense Department, and the Private Sec- 
tor-A 3-Part Dialogue About Fundamental Objectives and 
Needs," in the journal referenced above, pp. 53-66. The differ¬ 
ences between military and civilian information security needs 
will be a continuing theme throughout this chapter. 

"U.S. General Accounting Office, Federal Information Sys¬ 
tems Remain Highly Vulnerable to Fraudulent, Wasteful, Abu¬ 
sive, and Illegal Practices, M ASAD-82-18, Apr. 21, 1982. 


automated systems security. "This aspect of 
NSDD 145 is unusual and worthy of atten¬ 
tion—essentially, the directive aims to bring 
together the separate paths of military and ci¬ 
vilian agencies in national security-related in¬ 
formation security, and put them both under 
the guidance of NSA. 

NSA's role in this respect will be guided by 
two interagency committees. One is the the 
Systems Security Steering Group, a high-level 
oversight group that meets twice a year. The 
second is a working group known as the Na¬ 
tional Telecommunications and Information 
Systems Security Committee (NTISSC), com¬ 
posed of 22 agency representatives, 12 from 
the national security community. " See table 
4-4 for the membership of these committees. 
NTISSC meets quarterly, and has subcommit¬ 
tees on automated information systems secu¬ 
rity and telecommunications security that 
meet more frequently. 

The scope of the roles of NSA and NTISSC 
depends on their interpretation of their man¬ 
date to assist in protecting information "the 
loss of which could adversely affect the na¬ 
tional security interest. " The extent to which 
this category includes unclassified information 
(essentially establishing a fourth level of clas¬ 
sification beyond the "top secret, " "secret," 
and "confidential" designations now used) will 
determine the range of military and civilian 
agency activities that will be influenced by 
NSDD 145. 


'The extent to whi ch NTISSC i s "domi nated by the mi I i - 
tary" became an issue in hearings held by the House Science 
and Technology Subcommittee on Transportation, Aviation, 
and Materials, J une27,1985.TheU.S. General Accounting Of¬ 
fice, in its testimony, indicated that 10 of the 22 representa- 
tives are from defense agencies (the Secretary of Defense; the 
Joint Chiefs of Staff: the Army, Navy, Air Force, and Marine 
Corps: the Defense Intelligence Agency: the National Security 
Agency: the National Communications System: and the Assis¬ 
tant Secretary of Defense for Command, Control, Communi¬ 
cations and Intelligence). Perhaps more important than the 
number of defense agency representatives is the number of rep¬ 
resentatives whose primary concern is the protection of classi¬ 
fied information, since the needs and motivations of such rep¬ 
resentatives are significantly different from those of other 
agencies. Under this criteria it would make sense to add the 
Director of Central Intelligence, and the Assistant to the Presi¬ 
dent for National Security Affairs, making 12 of 22 committee 
members from the “national security community, ” considered 
broadly. 
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Table 4-4.—Committees Guiding the 
Implementation of NSDD 145 


Systems Security Steering Group: 

1. Secretary of State 

2. Secretary of the Treasury 

3. Secretary of Defense* 

4. Attorney General 

5. Director of OMB 

6. Director of Central Intelligence* 

7. Assistant to the President for National Security 
Affairs, chair* 

National Telecommunications and Information Systems 
Security Committee: 

Consists of a voting representative of each of the above, 
plus a representative designated by each of the following: 

8. Secretary of Commerce 

9. Secretary of Transportation 

10. Secretary of Energy 

11. Chairman, Joint Chiefs of Staff 

12. Administrator, GSA 

13. Director, FBI 

14. Director, Federal Emergency Management Agency 

15. Chief of Staff, Army* 

16. Chief of Naval Operations* 

17. Chief of Staff, Air Force* 

18. Commandant, Marine Corps' 

19. Director, Defense Intelligence Agency* 

20. Director, National Security Agency* 

21. Manager, National Communications System* 

22. Assistant Secretary of Defense for Command. 

Control, Communications and Intelligence, chai~ 

a Denotesa representative closely associated with the defense/nattonal security 
community. See footnote 12, in text 

SOURCE” National Security Decision Directive 145, unclassified version, 
“National Policy on Telecommunications and Automated Information 
System Security, ” issued by the President, Sept 17, 1984 

The directive is still early in its implemen¬ 
tation. NTISSC and its related subcommittees 
have begun to meet (on a classified basis) to 
work out the implementation of the directive. 
They have developed a report on the status 
of computer and telecommunications security 
in the government, again classified, although 
OTA obtained an unclassified extract, dis¬ 
cussed below. Some of the other early activi¬ 
ties of the NTISSC and its subcommittees in¬ 
clude working on a scheme for categorizing 
sensitive, but unclassified, information in both 
the military and civilian agencies. They have 
also developed an OMB bulletin (No. 85-11) 
that asks agencies to report information to 
OMB on information security measures for 
classified systems. NSDD 145 will be dis¬ 
cussed in more detail later in this chapter. 

The second major recent policy action on 
information systems security is a new OMB 


circular, A-130, "Management of Federal In¬ 
formation Resources, " that supersedes and 
revises A-71 and three other circulars. 13 The 
revision attempts to present integrated guid¬ 
ance on Federal Information Resources Man¬ 
agement, considered broadly. The new circu¬ 
lar does not make major changes to A-71, but 
rather strengthens and clarifies it in a num¬ 
ber of areas: 

• It defines security as "both the protection 
of information while it is within the sys¬ 
tems and also the assurance that the sys¬ 
tems do exactly what they are supposed 
to do and nothing more .... security of 
information systems is first and foremost 
a management issue and only secondly a 
technical problem of computer security. " 

• It emphasizes new vulnerabilities in the 
government as a result of "smaller and 
more powerful computer systems and new 
communications technology and trans¬ 
mission media, together with the greater 
involvement of end users in managing in¬ 
formation resources. " 

• It acknowledges the relationship between 
the former Circular A-71 and Circular A- 
123, "Internal Control, " by noting that 
agencies should consider information 
security an essential part of their inter¬ 
nal control reviews. 14 

• It expands and clarifies the definition of 
"sensitive data" to include "data whose 
improper use or disclosure could adversely 
affect the ability of an agency to accom¬ 
plish its mission, proprietary data, rec- 


'The other circulars are A-90 ("Cooperating With State 
and Local Governments to Coordinate and Improve Informa¬ 
tion Systems”), A-l 08 ("Responsi bi I ities for the M ai ntenance 
of Records About I ndividuals by Federal Agencies”), and A- 
121 ("Cost Accounting, Cost Recovery, and Interagency Shar¬ 
ing of Data Processing Facilities”). 

"In 1983, the Office of Management and Budget revised 
Circular A-123, which, along with the Federal Managers Finan¬ 
cial Integrity Act (Public Law 97-255), requires agency heads 
to analyze safeguards and audit systems (of all kinds, includ¬ 
ing those applying to information systems), and report to the 
President and Congress annually with a plan for correcting any 
weaknesses. A U.S. General Accounting Office review of the 
first-year implementation of the Financial Integrity Act said 
that internal controls related to information systems received 
inadequate coverage in the reviews, and that some agencies were 
uncertain of the relationship between A-71 and A-123. 
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orals about individuals requiring protec¬ 
tion under the Privacy Act, and data not 
releasable under the Freedom of I nforma- 
tion Act. 1,15 

• It reasserts the need for agencies to de¬ 

fine security needs before procuring or 
starting formal development of applica¬ 
tion systems. 

• It adapts its requirement for risk analy¬ 

ses for all systems to note that "risk anal¬ 
yses may vary from an informal review 
of a microcomputer installation to a for¬ 
mal, fully quantified risk analysis of a 
large scale computer system. " 


‘ ‘The definition of sensitive data proposed in the draft cir¬ 
cular is quite different from the concept of sensitive data in 
NSDD 145, which considers data sensitive if it is related to na¬ 
tional security; the exact definition for NSDD 145 is yet to be 
released, as will be discussed later in this chapter. 


• It requires agencies to establish a secu¬ 

rity awareness and training program. 

• It briefly acknowledges that the Secre¬ 

tary of Defense has a role in information 
systems security for systems that proc¬ 
ess "information the loss of which could 
adversely affect the national security in¬ 
terest, " and directs DOD to provide tech¬ 
nical material and assistance to Federal 
agencies on information systems secu¬ 
rity. 16 


"NSDD 145 required that the Office of Management and 
Budget review A-71, Transmittal Memorandum #, and amend 
it as appropriate for consistency with the directive. Although 
Circular A-130 states that it has satisfied this requirement (ap¬ 
pendix IV, section 2), it has done so only in a proforma man- 
ner. On closer inspection, the wording in the circular actually 
does very little to clarify the substantial confusion about the 
relative roles of NTISSC, NSA, NBS, OMB, GSA, and other 
agencies in the area of information security. 


MAJOR FINDINGS 


Finding 1 

The Federal Government faces fundamentally 
new levels of risks in information security be¬ 
cause of increased use of networks, increased 
computer literacy, an explosion in microcom¬ 
puter use and decentralized data processing ca¬ 
pabilities, and increased dependency on infor¬ 
mation technology overall. 

This finding provides an important founda¬ 
tion for assessing the importance of informa¬ 
tion systems security as an issue. These trends 
are also discussed in several other chapters in 
this report. 

Increased Use of Networks 

Computer power is becoming cheaper and 
more widely distributed and the machines are 
becoming more sophisticated in their capabil¬ 
ities to share data and communicate with one 
another. As a result, the use of networks of 
all kinds, from local area networks linking an 
office's personal computers to dedicated data 
networks spanning thousands of miles, is ex¬ 
panding rapidly. In addition, an increasing 
number of computers are accessible via dial¬ 


up connections using ordinary phone lines. 
While these linkages add to the effectiveness 
of information technology systems, they also 
raise new vulnerabilities by allowing possible 
abuses at a distance, and by increasing oppor¬ 
tunities for eavesdropping. 7 

Increased Computer Literacy 

The simple fact that more people know how 
to use computers, and that computers are be¬ 
coming easier to use, means that there are 
more people both inside and outside the Fed¬ 
eral Government who have the skills to use in¬ 
formation systems for unintended purposes. 


1 OTA’s forthcoming study, “New Communication Technol¬ 
ogies: I mplications for Privacy and Security, "will discuss these 
issues further. Also see U .S. General Accounting Office, Increas¬ 
ing Use of Data Telecommunications Calls for Stronger Pro¬ 
tection and Improved Economies. LCD-81-1, Nov. 12, 1980: and 
U.S. Congress, Office of Technology Assessment, Electronic 
Survei Uance and Civil Liberties, OTA-CIT-29 (Washington, DC: 
U.S. Government Printing Office, October 1985). 
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Microcomputers, Workstations, and 
Decentralized Data Processing 

As discussed in chapter 2, the Federal Gov¬ 
ernment is in the midst of an explosion in 
microcomputer use, from almost none in 1975 
to estimates of over 100,000 in 1985. In addi¬ 
tion to their use as independent data proces¬ 
sors, microcomputers that are used as "intel¬ 
ligent workstations" 18 to exchange data with 
a larger computer and manipulate it independ¬ 
ently raise very significant managerial issues. 
This decentralization of data-processing capa¬ 
bilities reduces the degree of management con¬ 
trol over data and information systems use; 
it increases the number of people using infor¬ 
mation systems; and these machines have new 
security problems of their own. On the other 
hand, decentralized systems can be more se¬ 
cure in some ways because all data are not vul¬ 
nerable as they would be in one large system. 

In essence, designers and users of largescale 
computers were just beginning to understand 
information security needs and implement ef¬ 
fective measures when the microcomputer ap¬ 
peared on the scene, destroying the fragile de¬ 
veloping consensus about security. Westin 
and Hoffman 19 describe seven key risks par¬ 
ticularly applicable to microcomputers: 

1. lack of clear organizational policy identi¬ 
fying sensitive information on office au¬ 
tomation systems; 

2. failure to provide adequate physical-loca¬ 
tion security for machines and storage 
media; 

3. failure to have key locks on terminals; 

4. weaknesses in password systems govern¬ 
ing access to central databases from mi¬ 
crocomputers; 

5. frequent lack of access logs or journals on 
office systems of connected microcom¬ 
puters; 


"Theterm "intelligent workstation” is used by computing 
experts to refer to a computer terminal that has substantial 
stand-alone processing capabilities, as opposed to a "dumb ter¬ 
minal, " which can only be used to communicate with a shared 
larger computer. 

"Alan Westin and Lance Hoffman, "Privacy and Security 
Issues in the Use of Personal Information About Clients and 
Customers on Micro and Personal Computers Used in Office 
Automation," OTA contractor report, February 1985. 


6. absence of methods to record efforts to 
penetrate security of office-based micro¬ 
computer systems; and 

7. absence of either security education for 
end users or auditing of user practices. 

Other problems include the generally sim¬ 
plistic (and thus hard to protect) architectures 
of small computer systems, lack of adequate 
off-site backup for data in small computers, 
and reluctance of management to demand 
security discipline from users of small com¬ 
puters. 

Management guidelines need to be devel¬ 
oped in each of these areas in order to main¬ 
tain information security. Only 27 percent (37 
out of 139) of agencies responding to OTA's 
Federal Agency Data Request indicated that 
they had an explicit information security pol¬ 
icy for microcomputers. 

NBS has attempted to help agencies develop 
such policies with a recent publication, Secu- 
rity of Personal Computer Systems: A Man¬ 
agement Guide J anuary 1985. Nevertheless, 
there is likely to be some lag between the rapid 
increase in microcomputer use and the devel¬ 
opment and implementation of effective ad¬ 
ministrative measures. An example of such a 
lag is the fact that the main GSA retail mi¬ 
crocomputer store, Office Technology Plus, 
does not carry any security-related hardware 
or software; they refer inquiries to their store 
near the Pentagon. 20 Security is not yet con¬ 
sidered an integral part of the world of most 
microcomputer vendors and users. This situ¬ 
ation points to the need for greatly increased 
vigilance on the part of information system 
managers and users. 

Increased Dependency on Information 
Technology 

As noted in chapter 2, Federal expenditures 
for information technology have increased sig¬ 
nificantly, from $10.4 billion in fiscal year 1983 
to an estimated $15.2 billion in fiscal year 
1986. In addition to using more information 


"’OTA site visit, OfficeTechnology Plus, March 1985; tele¬ 
phone conversation with KenJ ones of OTP, February 1986. 
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technology for traditionally automated appli¬ 
cations (e.g., payroll processing), the govern¬ 
ment is using information technology in a 
variety of other areas, including decision sup¬ 
port, reporting and dissemination of informa¬ 
tion, and auditing. Many Federal missions, 
from social welfare programs to revenue col¬ 
lection to air traffic control, are critically de¬ 
pendent on information technology. This es¬ 
calating intensity and range of use reinforces 
the importance of effective safeguards and pol¬ 
icies regarding privacy and security. Further, 
in the next decade there will increasingly be 
new information technologies-such as voice 
data input/output, digital telephone networks, 
optical storage of data, and expert systems— 
with different security problems. 

Together, these trends imply that the whole 
area of information systems security is in flux 
and the potential problems are perhaps an or¬ 
der of magnitude greater than they were a dec¬ 
ade ago. These new levels of risk, along with 
the major policy changes in the executive 
branch, suggest the need for increased con¬ 
gressional attention in this area. 

Finding 2 

Although there has been some progress in the 
past 5 to 10 years, there is widespread evidence 
that Federal policy requiring the use of appro¬ 
priate information systems security measures 
has been ineffective. 

There is substantial evidence pointing to 
continuing (and perhaps worsening) informa¬ 
tion security problems in the Federal Govern¬ 
ment. The evidence comes principally from 
five sources-GAO reports, OTA's Federal 
Agency Data Request, other audits, congres¬ 
sional hearings and studies, and expert opinion. 

GAO Reports 

Table 4-5 lists some of the GAO reports over 
the past decade that have been critical of in¬ 
formation security practices in Federal agen¬ 
cies. These reports range from audits of spe¬ 
cific agencies, such as the Social Security 
Administration or the Financial Management 
Service, to broader studies critical of govern- 


Table 4-5.—Selected GAO Reports Identifying Major 
Information Systems Security Problems, 1975-85 


General: 

Computer-Related Crimes in Federal Programs, Apr. 27, 1976, 
FGMSD-76-27. 

Fraud in Government Programs: Ho w Extensive Is It and How 
Can /t Be Controlled? Sept. 30, 1981, AFMD-81-73. 
Federal Information Systems Remain Highly Vulnerable to 
Fraudulent, Wasteful, Abusive, and Illegal Practices, Apr. 
21, 1982, MASAD-82-16. 

Computers and data processing: 

Managers Need To Provide Better Protection for Federal Auto¬ 
matic Data Processing Facilities, May 10, 1976, 
FGMSD-76-40. 

Automated Systems Security—federal Agencies Should 
Strengthen Safeguards Over Personal and Other Sensitive 
Data, Jan. 23, 1979, LCD-78-123. 

Central Agencies Compliance With OMB CircularA-71, Trans¬ 
mittal/Memorandum No. 1, Apr. 30, 1980, LCD-80-56-1. 
Most Federal Agencies Have Done Little Planning for ADP 
Disasters, Dec. 18, 1980, AFMD-81 -16. 
Telecommunications: 

Vu/nerabi/ities of Telecommunications Systems to Unauthor¬ 
ized Use, Mar. 31, 1977, LCD-77-102. 

Increasing Use of Data Telecommunications Calls for 
Stronger Protection and /reproved Economies, Nov. 12, 
1980, LCD-81-1 . 

Audits of specific agencies: 

/RS’ Security Program Requires Improvements To Protect 
Confidentiality of /ncome Tax /formation, July 11, 1977, 
GGD-77-44. 

Flaws in Controls Over the Supplemental Security Income 
Computerized System Causes Millions in Erroneous Pay¬ 
ments, Aug. 9, 1979, HRD-79-104. 

The Bureau of the Census Must Solve ADP Acquisition and 
Security Problems, Oct. 31, 1981, AFMD-82-13. 

Solving Social Security's Computer Problems: Compre¬ 
hensive Corrective Action Plan and Better Management 
Needed, Dec. 10, 1981, HRD-82-19. 

Weak Financial Controls Make the Community Services 
Administration Vulnerable to Fraud and Abuse, Aug. 22, 
1980, FGMSD-80-73. 

/improvements Needed in. Genera/ Automated Data Process¬ 
ing Controls at the National Finance Center, July 12, 1985, 
AFMD-85-38. 

SOURCE Office of Technology Assessment 

mentwide practices. GAO's 1982 study, Fed- 
eral Information Systems Remain Higly Vul¬ 
nerable to Fraudulent, Wasteful, Abusive, and 
Illegal Practices, mentioned earlier, argued 
that OMB's policy in A-71 was never clear 
enough, it did not establish minimum stan¬ 
dards, and agency performance was not re¬ 
viewed for compliance. 

GAO has conducted a survey of information 
security practices at key computer installa¬ 
tions of 17 Federal agencies. The results, sum¬ 
marized in tables 4-6 and 4-7, show that only 
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Table 46.—Systems Meeting GAO Criteria 
for Physical, Technical, and Administrative 
Security Safeguards 


Number of 
systems having 


safeguards 

Physical safeguards: 

Physical perimeter., . 16 

Entry by badge or cypher lock.24 

Use of security guards.22 

Use of smoke and/or heat detectors.24 

Technical safeguards: 

Identification and authentication.23 

Audit trails or logs.10 

Discretionary access controls (authorization). 24 

Administrative safeguards: 

Separation of duties ,.15 

Physical, administrative, and technical 

procedures tested.20 

Audit trail information reviewed.10 

Passwords required to be changed.21 

Have all safeguards.5 a 


Although these systems contained all evaluated safeguards, they may still be 
vulnerable because: 1) GAO evaluated selected safeguards only, and 2 ) all 
evaluated management responsibilities were not implemented GAO does not 
know how vulnerable the systems may be because this survey did not involve 
testing the effect iveness of the safeguards. 

NOTE Total number of systems examined = 25 

SOURCE: Statement of William Franklin, Associate Director, IMTEC Division, 
General Accounting Office, before the House Committee on Science 
and Technology, Subcommittee on Transportation, Aviation, and Ma¬ 
terials, “Automated Information Systems Security in Federal Civil Agen¬ 
cies,” Oct 29, 1985. 

Table 4-7.—Systems Meeting GAO Criteria for 
Computer Security Management Evaluation 


Number of 
systems meeting 


Management responsibilities requirements 

Risk management.8 

Training.2 

ADP personnel security.2 

Assigned responsibility.4 

Budgeting and accounting for 

security cost.1 

Contingency plans (exist and tested).9 

Independent evacuation or audit.19 

Written procedures.11 

NOTE: Total number of systems examined =25 


SOURCE: Statement of William Franklin, Associate Director, IMTEC Division, 
General Accounting Office, before the House Committee on Science 
and Technology, Subcommittee on Transportation, Aviation, and Ma- 
terials, “Automated Information Systems Security in Federal Civil Agen¬ 
cies,” Oct. 29, 1985 

5 of these 25 critical systems had all appro¬ 
priate safeguards. Two areas in which a ma¬ 
jority of systems fell short were: 

1. the use of audit logs to monitor system 
activity; and 

z. management responsibilities, including 
provisions for effective training, person¬ 
nel security, assignment of responsibili¬ 


ties, budgeting and accounting for secu¬ 
rity cost, proper contingency plans, and 
available written security procedures. 

OTA's Federal Agency Data Request 

Table 4-8 shows the percentage of Federal 
agency components that reported using a va¬ 
riety of information security techniques for 
sensitive, unclassified information. Only 34 
percent of agencies reported that they have 
screened all of their sensitive, unclassified 
computer applications for sensitivity and 
appropriate safeguards before use, and only 
61 percent report using personnel screening 
for all of these applications. Both of these 
measures are mandated by A-71/TM-1, and by 
the new circular, A-130. In addition, only 78 
of 134 (58 percent) agencies reported that they 
had conducted one or more risk analyses in the 
last 5 years, a procedure also mandated by 
OMB's guidance. Finally, only 57 percent of 
agencies reported that they had (or were in the 
process of developing) contingency plans to 
handle the disruption of their major main¬ 
frame computers. The agencies did report sig¬ 
nificant use of passwords, backup of key data 
files, and physical security for hardware, al¬ 
though only 58 percent reported that they 
used audit software to monitor the activities 
on systems processing sensitive, unclassified 
information. 

Other Audits 

Reports by the agencies' own inspectors 
general, and by the agencies' upper manage¬ 
ment under the Federal Managers Financial 
I ntegrity Act, also frequently identify weak¬ 
nesses—many of them long-standing-in con¬ 
trol procedures related to information security. 
See table 4-9 for examples. A GAO review of 
agencies' internal control reports submitted 
under the Federal Managers Financial In¬ 
tegrity Act indicated that the number of agen¬ 
cies reporting material weaknesses in auto¬ 
matic data processing controls rose from 10 
in 1983 to 14 in 1984 (out of a total of 18 of 
the largest agencies) .211 n addition, the Na- 


"U.S. General Accounting Office, Financial I ntegrity Act: 
The Government Faces Serious Internal Control and Account¬ 
ing Systems Problems. December 1985. 
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Table 4-8.—Security Techniques in Use by Federal Agencies in Unclassified But Sensitive Applications 


Number reporting 

Number of use for 1000/0 

Technique components using Percent of systems Percent 


Applications screening. 67 48.20/o 47 33.80/o 

Personnel screening. 102 73.4 85 61.2 

Audit software . 80 57.6 30 21.6 

Restrictions on dial-up access. 85 61.2 65 46.8 

Password controls. 133 95.7 106 76.3 

Encryption. 30 21.6 9 6.5 

Backup hardware. 87 62.6 48 34.5 

Backup of key data files . 133 95.7 110 79.1 

Physical security for hardware. 127 91.4 94 67.6 

Other. 9 6.5 5 3.6 


NOTE Total agency components responding 139 
SOURCE OTA Federal Agency Data Request 


Table 4-9.—Examples of Other Audits Identifying 
Significant Information Security Problems 
in Federal Agencies 


Department of Energy, Inspector General, “Screening Con¬ 
tractor Employees Having Access to Sensitive, Unclassi¬ 
fied Data Contained in Departmental Computer Systems,” 
Oct. 20, 1981, MR 81-44. 

General Services Administration, Inspector General, “insuffi¬ 
cient Controls and Policies Exist To Effectively Procure, 
Manage, and Use Microcomputer Assets,” Region 10, un¬ 
dated, A40349/101 FI 840926. 

Agency for International Development, Auditor General, “Sur¬ 
vey of Computer Security for AID’S Washington Based 
Automated Information System, ” Dec. 24, 1980, 81-26. 

Department of the Interior, Inspector General, “Synopsis of 
Recent ADP Audit Findings, ” February 1985, H-MO-MOA- 
06-85(a). 

Agencies listing ADP security flaws in their reports under the 
Federal Managers Financial Integrity Act: 

Department of Education 
Department of Commerce 
Nuclear Regulatory Commission 

Department of Health and Human Services-Health Care 
Financing Administration, Public Health Service 
General Services Administration 
Department of Agriculture 
Department of Housing and Urban Development 
Department of the Treasury 
Office of Personnel Management 
Department of Labor 
Veterans Administration 
Small Business Administration 
National Aeronautics and Space Administration 
Environmental Protection Agency 
Department of State 
White House 
Department of Defense 

SOURCE Off Ice of Technology Assessment, various agency reports 

tional Telecommunications and Information 
Administration, as part of its duties under PD- 
24, discussed earlier, performed 28 surveys of 
telecommunications and information vulner¬ 
ability in civilian agencies during 1979 to 1984, 


involving interviews and briefings with hun¬ 
dreds of agency staff. A summary of the find¬ 
ings from the first 21 surveys is presented in 
appendix 4B at the end of this chapter, and 
indicates significant problems in the area of 
telecommunication security in particular. 

Finally, the first annual report from the 
ntissc (mandated by NSDD 145) describes 

the government posture in information sys¬ 
tems security as "poor and rapidly getting 
worse, and in communications security as 
"unsatisfactory. The report recommends, in 
part, that the government develop a coherent 
framework for computer security policies, and 
that such policies require each system proc¬ 
essing classified or sensitive data to have a 
personal identification and authentication sys¬ 
tem, audit trails that keep a record of activ¬ 
ity, a designated security officer, a written 
security plan, control over physical access, and 
security controls on removable storage media. 
The report also calls for cabinet-level action 
to increase manpower and funding in com¬ 
puter and communications security govern¬ 
mentwide. 22 

See chapter 5 for further studies of computer 
crime in the Federal Government. 

Congressional Studies and Flearings 

Several congressional committees have played, 
a key role in evaluating the state of informa- 

"National Telecommunications and Information Systems 
Security Committee, "First Annual Evaluation of theStatus 
of Telecommunications and Automated Information Systems 
Security in the United States Government, "Aug. 10,1985 (un¬ 
classified extract). 
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tion security in the Federal Government. Two 
reports in the mid- 1970s by the Senate Com¬ 
mittee on Government Operations (now Gov¬ 
ernmental Affairs), then chaired by Senator 
Abraham Ribicoff, noted widespread comput¬ 
er security problems and urged improved co¬ 
ordination in policy regarding computer secu¬ 
rity and abuse. 23 A 1983 report from the same 
committee, now chaired by Senator William 
Roth, also highlighted some of the same issues 
and concerns. 24 

On the House side, the Committee on Science 
and Technology, Subcommittee on Transpor¬ 
tation, Aviation, and Materials, formerly chaired 
by Representative Dan Glickman, has held a 
series of hearings on computer and telecom¬ 
munications security, and has issued a report 
urging more leadership in security policy, 
more Federal research and development and 
educational programs in computer security, 
and the establishment of a national commis¬ 
sion on information security and policy is¬ 
sues. 26 The House Committee on Government 
Operations has also held hearings, particularly 
on the role of NSA and NSDD 145. 26 


'Senate Committee on Government Operations, Problems 
Associated With Computer Technology in Federal Programs 
and Private Industry: Computer Abuses, 94th Cong.. 2dsess., 
1976; and Computer Security in Federal Programs, 95th Cong., 
Istsess., 1977. 

“Senate Committee on Governmental Affairs, Permanent 
Subcommittee on Investigations, Federal Computer Security: 
An Analysis of Congressional Initiatives and Executive Branch 
Responsibilities (prepared by the Congressional Research Serv¬ 
ice), 98th Cong., Istsess., 1983. 

‘House Committee on Science and Technology, Subcom¬ 
mittee on Transportation, Aviation, and Materials, hearings 
on “Computer and Communications Security and Privacy, ” 
Sept. 26, Oct. 17, and Oct. 24, 1983, and Sept. 24, 1984; and 
report, Computer and Communications Security and Privacy, 
April 1984. The Subcommittee has also held hearings evaluat¬ 
ing National Security Decision Directive 145, June 27, 1985. 
These will be discussed in more detail later in the chapter. Fi¬ 
nally, both the House and Senate have held hearings on the 
vulnerability of Federal information technology to computer 
crime. These will be discussed in more detail in ch. 5. 

“’See Jim Dray and Fred Wood, OTA, Statement for the 
Record Before the House Government Operations Subcommit¬ 
tee on Legislation and National Security Hearing on H.R. 2889: 
The Computer Security Research and Training Act of 1985, 
Sept. 18, 1985. 


Expert Opinion 

Based on OTA's workshops and other con¬ 
tacts with Federal information technology 
managers, most information security officials 
agree that there are serious, continuing secu¬ 
rity problems. While many officials would as¬ 
sert that there has been some improvement in 
the past few years as Federal personnel have 
become more aware of security issues (mostly 
through publicity about hackers), they would 
also acknowledge that frequently there is a 
lack of attention to information security on the 
civilian side of government. OMB staff, for 
their part, openly acknowledge that A-71/TM- 
1 has not been effective, and this realization 
is one of the motivations for revising that cir¬ 
cular and incorporating it into the new circular 
on Federal information resources management. 


Finding 3 

Three key factors inhibit appropriate Federal 
information security measures: 

1. competition for resources in Federal pro¬ 
grams, which tends to limit spending for a 
"latent" issue like security; 

2. a lack of awareness or motivation among 
agency personnel; and 

3. an absence of clear guidance on appropri¬ 
ate security measures. 

While there are many and varied reasons for 
the lack of attention paid to information secu¬ 
rity among Federal programs, these three fac¬ 
tors seem to be common themes mentioned 
frequently in conferences, personal contacts, 
and workshops with Federal agency staff .27 

See, for example, GAO and other audit reports referenced 
above; also John O’Mm-a, “Computer Security: A Management 
Blindspot, ” Computer Security Handbook (Northborough, MA: 
Computer Security Institute, 1984), pp. 2A1-2A4; Joel Zimmer¬ 
man, “The Human Side of Computer Security, ” Computer Secu¬ 
rity Journal, summer 1984, pp. 7-19. 

These factors are most applicable to civilian agencies (and, 
in many cases, to the private sector as well). In sensitive de¬ 
fense or national security applications where the threats are 
more apparent (e.g., foreign adversaries), awareness and will¬ 
ingness to spend money for security are likely to be much high¬ 
er. And, as noted earlier in the chapter, the defense and intelli¬ 
gence agencies have a great deal of expertise in security, and 
particularly detailed guidance for their staff on appropriate 
measures for protecting information systems. However, prob- 
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Competition for Resources 

Security measures frequently cost money, 
and they almost always exact a "tax" on the 
productivity of information systems. Audit 
trails that record the activities on a system, 
for example, require computer time and re¬ 
sources, and they take time and expertise to 
review. If passwords are required to be more 
than six characters and changed every 3 
months, they are often harder to remember. 28 
The use of encryption systems requires time 
to encrypt and decrypt, time and staff to man¬ 
age the encoding keys, etc. If given a choice 
between spending resources on security meas¬ 
ures, or spending those resources on features 
or staff to enhance the performance of an 
information system, most managers would 
choose the latter, especially in a climate of 
tight budgets. 

F urther, security expenditures are hard to 
identify and review because security has not 
usually been included as a separate line item 
in agency budgets or procurements, and the 
number of staff hired to handle information 
security exclusively is usually very small and 
of relatively low status within the agency. Ta¬ 
ble 4-10 shows the funding and number of full¬ 
time equivalent staff that agencies reported 
to OTA for computer and communications se¬ 
curity. The reported figures are extraordinar¬ 
ily varied, and they probably do not include 
the full range of information security activi¬ 
ties, since (as GAO noted in its study of 25 
key systems) agencies tend to be unprepared 
to account for security costs, and many staff 
handle information security part-time. How- 


lems in awareness, willingness to spend funds, and clarity of 
guidance are also significant for some defense applications, par¬ 
ticularly those that deal with unclassified information. (OTA, 
personal communications with Defense Logistics Agency staff, 
Jan. 22, 1985). 

“‘Computer security experts would argue that a well-de¬ 
signed, secure system-one for which security has been designed 
in from the start and not added later-can run just as efficiently 
as an insecure one, and in some cases better. In addition, NSA 
has had some success in using longer passwords composed of 
real words, such as “ma pa sam, which are more secure than 
a short password but not as hard to remember as a series of 
unrelated characters, such as “ lxgh7ytrb. ” (Sheila Brand, Na¬ 
tional Computer Security Center, personal communication, Sep¬ 
tember 1985). 


ever, the total dollar figure reported by all 
agencies responding ($33.5 million in fiscal 
year 1985) would seem low compared to OMB's 
estimate that the government spent $13.9 bil¬ 
lion for information technology in fiscal year 
1985. Clearly, though, more authoritative 
numbers than these brief responses to OTA's 
Federal Agency Data Request are needed as 
a base for policy action. 

OMB's rationale for not segregating secu¬ 
rity expenditures in budget requests is that 
security is primarily a component of good in¬ 
formation systems management. "It would be 
a mistake to divide out computer security 
from computer management. They should be 
intertwined. 129 Computer systems designers 
agree that the most productive way to seek 
out security in information systems is to in¬ 
corporate security concerns throughout the 
system's design, implementation, and man¬ 
agement. But the net result of OMB policy 
might be that, in some cases, system designers 
do not build in security because they believe 
it will compete with the funds available for 
hardware and software that increase perform¬ 
ance. As an OMB official noted: 

I would also say that the annual budget 
process-and I depart a little bit, if i may, 
from my position as Deputy Director of Of¬ 
fice of Management and Budget-tends to 
emphasize reduced funds rather than increas¬ 
ing expenditures for enhanced telecommuni¬ 
cation and data processing and security .30 

The implementation of NSDD 145 is likely 
to change the way agencies budget for infor¬ 
mation security, although the exact nature of 
those changes has not yet been determined. 
The directive provides that the Director of 
NSA shall: 

• review and assess annually the telecommu¬ 
nications system security programs and 
budgets of the departments and agencies 
of the government, and recommend alter- 


"'J oseph Wright, Deputy Director, Office ofManagement 
and Budget, testimony to the House Science and Technology 
Subcommittee on Transportation, Aviation, and Materials hear¬ 
ings on “Computer and Communications Security and Privacj’, 
Sept. 24, 1984, p. 5. 

“’Ibid., p. 4. 
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Table 4-10.—Federal Agency Expenditures and Staffing for Computer and Communications Security 


Agency 

Funding (in thousands) 


Number FTE‘ 


1980 

1983 

1985 

1980 

1983 

1985 

Department of Agriculture. 

$2,295 

$5,516 

$11,866 

6.4 

17.6 

33.0 

Department of Commerce. 

2,565 

2,601 

2,649 

21.0 

21.5 

22.0 

Department of Defense. 

762 

2,900 

6,257 

35.0 

82.5 

133.5 

Department of Education. 

0 

280 

330 


5.0 

5.75 

Department of Energy. 

0 

263 

170 

1.0 

0.5 

0.5 

Department of Health and Human Services . 

521 

486 

473 

10,25 

10.25 

13.0 

Department of Housing and 







Urban Development. 

0 

90,000 

0 

1.0 

1.0 

1.0 

Department of the Interior. 

132 

249 

297 

2.0 

8.0 

9.5 

Department of Justice. 

80 

234 

287 

2.0 

113.4 

134.0 

Department of Labor. 

40 

80 

120 

1.0 

2.0 

3.75 

Department of State. 

0 

520 

598 

1,0 

5.0 

8.0 

Department of Transportation. 

46 

96 

932 

10.3 

11.3 

13.5 

Department of the Treasury. 

164 

527 

1,607 

48.8 

14.6 

29.4 

Subtotal, cabinet agencies. 

$ 6,605 

$ 13,842 

$ 25,585 

140.0 

293.0 

407.0 

20 selected independent agencies (total) . . . 

749 

2,362 

7,927 

62.0 

64.0 

72.0 

Total. 

$ 7,354 

$ 16,204 

$ 33,511 

202.0 

357.0 

479.0 


a FTE = Full-time equivalent staff members. 
NOTE: Some figures are rounded, 

SOURCE: OTA Federal AgencyData Request 


natives, where appropriate, for the execu¬ 
tive agent and the steering group; and 
.review annually the aggregated automated 
information systems security program and 
budget recommendations of the depart¬ 
ments and agencies of the U .S. Govern¬ 
ment for the executive agent and the steer¬ 
ing group. 31 

It is not yet clear what kind of authority 
NSDD 145 confers on NSA and the steering 
group. One key NSA official said in congres¬ 
sional testimony that while agencies retained 
autonomy on whether to implement security 
measures, NSA would control what would be 
implemented: 

Once a department or agency head has cho¬ 
sen to spend money on telecommunications 
security or automated information systems 
security, the NSA, as National Manager, pre¬ 
scribes or approves which COMSEC [commu¬ 
nications security] or COMPUSEC [comput¬ 
er security] technique, system or equipment 
will be used. 32 

Finding 4 will discuss NSDD 145 in more 
detail. 

"Sections 7j-k of the directive (emphasis added). See table 
4-4 for the composition of the Systems Security Steering Group. 

'Walter G. Deeley, (former) Deputy Director, Communica¬ 
tions Security, NSA, statement to House Science and Technol¬ 
ogy Subcommittee on Transportation, Aviation, and Materi¬ 
als, J une 27, 1985. 


Lack of Awareness and Motivation 

Another common theme in many of the au¬ 
dit reports cited above is that frequently top 
agency staff and many general users are un¬ 
aware of the need for information security. 
Thus, security staff commonly report that, for 
example, computer users will write down their 
password on the wall next to their terminal. 33 
This lack of awareness is particularly acute 
among microcomputer users, most of whom 
are new to the special security problems raised 
by the use of their machines. Some of the fac¬ 
tors that increase the awareness of computer 
users toward security needs include press at¬ 
tention, top-level management support, and 
education and training programs. A later sec¬ 
tion of this chapter will discuss these in more 
detail. 

Lack of Clear Guidance 

Even when agencies are aware of security 
risks, it is often unclear what measures are 
appropriate. In short, the current policy guide¬ 
lines are not clear and specific enough to give 
Federal managers a concrete idea of what they 
should do to implement the policies. Circulars 
A-71 and A-130 do not provide guidance on 


3| See, e.g., Zimmerman, op. cit. 
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security measures appropriate for different ap¬ 
plications; rather they mandate a risk analy¬ 
sis to help make this assessment. However, 
agencies have reported increasing frustration 
with risk analyses. They have frequently been 
complex, expensive, and oriented toward phys¬ 
ical or technical security measures for large- 
scale computing centers, at the expense of sim¬ 
pler, cheaper, common-sense strategies. 34 

Federal Government policy and security ex¬ 
perts have responded to this problem in sev¬ 
eral ways. First, substantial efforts are under 
way to make risk analysis techniques simpler, 
cheaper, and more helpful. 35 Second, there has 
been some substantial movement toward de¬ 
veloping a set of minimum security standards 
for various information system applications. 
Such standards represent a promising tech¬ 
nique because they make appropriate actions 
clear, and eliminate the need for formal risk 
analyses except in unusual or particularly sen¬ 
sitive situations. As noted earlier, USGS, for 
example, has reported success in using a tech¬ 
nique based on a simple questionnaire that 
asks system managers to determine the degree 
of sensitivity of their applications, and to in¬ 
dicate whether they have implemented a set 
of minimum security measures. 

The National Computer Security Center 
(NCSC) 36 and the NTISSC (the implementing 
committee for NSDD 145) are also working on 
a variety of schemes to categorize the sensi¬ 
tivity of unclassified national security-related 
information and, ultimately, to specify appro¬ 
priate security measures for each level of sen¬ 
sitivity. In related work, the NCSC has al¬ 
ready developed a scheme for categorizing the 
technical security features of computer sys¬ 
tems, ranging from those that require little 
more than password control (the "Cl" level) 


“‘See, for example. Robert Campbell. “Agency Risk Analy¬ 
sis Still Inadequate, ” Mar. 29, 1985, p. 23; and *'OMB Direc¬ 
tive Is Dramatically Out-of-Date, ” Government Computer 
News, May 10, 1985, p. 31. 

“See, for exampl e, the proceedi ngs from the Ai r F orce's 
first conference on risk analysis techniques, J an. 21-23, 1985, 
Montgomery, AL, 

'The DOD Computer Security Center (under the auspices 
of NSA) changed its name to the National Computer Security 
Center in fall 1985. 


to those whose operating systems can pass so¬ 
phisticated tests of design integrity (the "AI" 
level). The center has an ongoing program for 
evaluating products submitted by vendors in 
order to rank them according to their techni¬ 
cal security-related features. 37 Each of these 
categorization schemes is potentially a very 
important step in helping to make the choice 
of information security measures for Federal 
systems clear and explicit. - 

Finding 4 

As NSDD 145 is implemented, it becomes in¬ 
creasingly clear that NSA and the committees 
guiding implementation of the directive will 
play a significant if not dominant role in all 
aspects of information security in the Federal 
Government whether or not the information is 
classified. NSDD 145 is likely to result in 
stronger governmentwide leadership in infor¬ 
mation security policy; however, concerns have 
been expressed that it puts the national secu¬ 
rity community in an unusual, influential if not 
controlling position on a key aspect of the Na¬ 
tion's information policy. 

While the language of NSDD 145 focuses on 
national security-sensitive information and 
hostile threats, it also states that NSA is to 
act as the government's focal point for infor¬ 
mation security, and 

... review and approve all [presumably na¬ 
tional security-related] standards, techniques, 
systems and equipments for telecommunica¬ 
tions and automated equipment security. 

The implementation of NSDD 145 is still in 
progress, and NTI SSC is in the midst of defin¬ 
ing sensitive national security-related informa¬ 
tion and thus the scope of their jurisdiction. 
However, early indications from participants 
on NTI SSC, as well as congressional testi¬ 
mony by NSA officials, are that the commit¬ 
tee may intend to construe their jurisdiction 
very broadly, to include, for example, informa¬ 
tion that is sensitive for reasons of privacy, 


Department of Defense Corpouter Security Center. De¬ 
partment of Defense Trusted Computer System Evaluation Cri¬ 
teria, CSC-STD-001-83, August 1983. This is also known as 
“The Orange Book. ” 
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commercial competition, or agency decision¬ 
making. 38 

The only other significant technical resource 
in the government for information security is 
the NBS Institute for Computer Sciences and 
Technology (ICST). ICST has approximately 
nine full-time equivalent staff devoted to in¬ 
formation security in the government as a 
whole (including some working on defense- 
related security). The National Computer 
Security Center has more than 200. 39 Thus the 
de facto assumption behind NSDD 145 is that 
NCSC can effectively serve as a standards- 
setter and technical resource for all (or almost 
all) Federal agency needs for security. 

This approach is controversial, with major 
advantages and disadvantages. Earlier find¬ 
ings in this chapter have documented the need 
for clear and useful policy action in informa¬ 
tion security, and the mechanism set forth in 
NSDD 145 could provide the leadership and 
visibility to facilitate that action. NCSC can 
build on a great wealth of expertise in infor¬ 
mation security matters. In addition, NTISSC 
provides a significant opportunity for civilian 
agencies to help guide the process, and it pro¬ 
vides an important forum for agencies to share 
security problems and solutions with each 
other. 

Yet, the same centralization of authority 
that facilitates leadership and effective action 
also places NSA (as national manager for com¬ 
puter security) and the Secretary of Defense 
(as executive agent) in an unusual controlling 
position on security policy for both military 
and civilian agencies. This situation has led 


38 A NSA/NTISSC staff member indicated in early 1986 
that the NTISSC was leaning toward a definition of "sensitive 
for national security reasons" that would leave the final judg¬ 
ments in the hands of the agency holding that information. 
NTISSC would providecriteriatohelpagenciesmakesuch a 
judgment. This proposal is still in draft form, however. 

3 'OTA’s interviews with Robert Brotzman, National Com¬ 
puter Security Center, December 1984, and Dennis Branstad/ 
Stuart Katzke, NBS, February 1985. It should also be noted 
that for several years in a row, the Administration has proposed 
to eliminate or severely cut the budget of the I nstitute for Com¬ 
puter Sciences and Technology, which runs the information 
security and Federal I nformation Processing Standards pro¬ 
grams at NBS. 


to heated debate in a 1985 congressional hear¬ 
ing. Representative] ack Brooks, for example, 
called the directive: 

... one of the most ill-advised and potentially 
troublesome directives ever issued by a 
President. ... 

First, it was drafted in a manner which 
usurps Congress's role in setting national 
policy. 

Second, the directive is in conflict with ex¬ 
isting statutes which assign to the Office of 
Management and Budget, the Department of 
Commerce, and the General Services Admin¬ 
istration the sole responsibility for establish¬ 
ing government-wide standards, guidelines 
and policies for computer and telecommuni¬ 
cations security. . . . 

Finally, I seriously question the wisdom of 
the President's decision to give DOD the 
power to classify, hence control, information 
located in the civilian agencies and even the 
private sector which, in DOD's opinion, may 
affect national security .40 

I n addition, the extent to which the needs 
of the civilian side of the government and the 
private sector mesh well with the needs of the 
national security sector is open to serious 
question. Some have asserted that these needs 
are quite different. For example, before the 
founding of the Computer Security Center in 
1982 some experts argued that the govern¬ 
ment's primary resource on information secu¬ 
rity issues should be independent of DOD and 
NSA. 41 Many of the original arguments against 
centering the technical resources at NSA con¬ 
cerned the possibility of excessive secrecy. 
Another disadvantage has recently been ar¬ 
gued; namely, that there are important differ¬ 
ences between the needs of the national secu¬ 
rity sector on the one hand, and of the other 
agencies and the private sector on the other. 
This disagreement has simmered for several 
years. I n 1984, the Computer Security J our- 
nal published a "dialogue" between the direc¬ 
tor of NSA and a prominent private sector 


‘“Representative J ack Brooks, statement before the Sub¬ 
committee on Transportation, Aviation, and Materials, House 
Committee on Science and Technology, J une27,1985. 

'Willis Ware, Rand Corp., personal communication, Febru¬ 
ary 1985. 
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computer security consultant. As the journal's 
editors summarized: 

The DOD position is clearly stated: preven¬ 
tion of unauthorized access is the primary 
need. Others in the private sector, however, 
contend that far greater attention must be 
paid to the potential for system misuse by 
persons who already possess authorization. 

Unfortunately, this difference of outlook is 
more than an academic disagreement of two 
parties with fundamentally different needs. 
NSA has begun actively promoting the idea 
that its primary need for multilevel access 
security (unquestionably a real need for na¬ 
tional security areas) is shared to a large ex¬ 
tent by the private sector. NSA does this 
openly, with the objective of lowering its own 
costs by creating a sufficiently large market 
base to bring about economies of scale. There 
is a significant concern that this will divert 
resources away from the real problems of 
most private sector organizations-and, in¬ 
deed, of most government agencies as well. 42 

Some observers have noted that the Com¬ 
puter Security Center's position emphasizing 
outside penetration may be changing, and that 
it may change further as NSDD 145 is imple¬ 
mented. 43 However, serious differences remain 
between national security and civilian needs. 
These tend to occur especially in the marginal 
zones of security, e.g., applications that proc¬ 
ess unclassified sensitive data, but do not need 
and cannot afford NSA-style security meas¬ 
ures. Although the NCSC staff say they intend 
to change and develop more expertise in sim¬ 
pler, cheaper measures^the extent to which 
they will be successful in bridging the tradi¬ 
tional gap between their techniques and those 
outside of the national security community re¬ 
mains to be seen. 

Another difficulty with the new NSDD 145 
arrangement for some civilian agencies is the 


“’’Computer Security, the Defense Department, and the 
Private Sector-A 3-Part Dialogue About Fundamental Objec¬ 
tives and Needs, ” Computer Security J ournal, summer 1984, 
pp. 53-66. 

"OTA interviews, Dennis Branstad and Stuart Katzke, 
NBS, February 1985. 

"Computer Security Center briefing for Federal agencies on 
the implementation of NSDD 145, Mar. 15, 1985, Institute for 
Defense Analyses, Alexandria, VA. 


secrecy of the procedures involved. Though in 
fact many of NCSC's activities are open in a 
way unusual for NSA^NTISSC and related 
committees guiding the implementation of 
NSDD 145 require top secret and "SI/TK" 
special clearances. This prevents many stake¬ 
holders from knowing about or influencing the 
implementation of NSDD 145, and was one of 
the reasons cited for the previous directive, 
PD-24, not being as successful as intended. 46 
Clearance procedures have also prevented at 
least one set of civilian agency representatives 
to one of the NTISSC subcommittees from 
participating in the first few months of activ¬ 
ity because the required clearances had not 
been obtained. 47 And despite the fact that 
NTISSC aims to have a broad representation 
from civilian agencies, several of the largest 
agencies are not participants, including the 
Departments of Health and Human Services, 
Housing and Urban Development, and the In¬ 
terior. Presumably these agencies were ex¬ 
cluded because they have little national secu¬ 
rity-related data, although they do have data 
that are sensitive for privacy, agency opera¬ 
tions, or proprietary reasons. 

The new role of NSA as a result of NSDD 
145 is a sensitive subject for other reasons as 
well. Because of the dominance of the national 
security agencies in the information security 
arena, it may be difficult for other individuals 
and organizations (including consultants or 
other government officials who work closely 
with NCSC) to frankly and openly present 
their views on NSDD 145. 48 

Finding 5 

Possible actions to improve Federal informa¬ 
tion systems security include: more intensive 
congressional oversight, changing budget pro¬ 
cedures with information security receiving 
higher priority and visibility, designating a ci- 


*’See Sherizen, op. cit. 

"Clearly, there are reasons for specific information security 
data to be classified, especially when it could lead a potential 
adversary to weak points in an agency, 

* OTA interview with GSA staff, March 1985. 

‘"Based on discussions with several key consultants and 
stakeholders. 
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vilian agency to be responsible for security 
training and technical support in the nonmili¬ 
tary sector, and revising and clarifying NSDD 
145. 


More Intensive Congressional Oversight 

Congress has played a very useful role in de¬ 
liberations on information security policy, as 
noted in earlier sections of this chapter. Con¬ 
gressional hearings are a key forum in which 
broad issues regarding computer and telecom¬ 
munications security can be openly raised. On 
the other hand, the management of informa¬ 
tion security in Federal agencies is intimately 
linked to many other aspects of agency man¬ 
agement, and many Federal officials express 
the fear that Congress wi 11 usurp thei r man¬ 
agement prerogatives if it attempts to deter¬ 
mine security policies within agencies. 

While it would clearly be unwieldy for Con¬ 
gress to attempt to directly manage informa¬ 
tion security in individual agencies, there is 
just as clearly a role for congressional over¬ 
sight and policymaking in this area. Some of 
the key aspects of this issue that Congress is 
well-suited to examine include the balance be¬ 
tween military and civilian interests in devel¬ 
oping security policy, the usefulness of new 
programs to facilitate good security practices, 
and the relation of information security to pri¬ 
vacy and other civil liberties. 

Congressional hearings focused on the in¬ 
creasing importance of information security, 
such as those held by the House Committee 
on Science and Technology, Subcommittee on 
Transportation, Aviation, and Materials, help 
Congress become better informed on the topic. 
In addition, the various oversight committees 
in both Houses may wish to include informa¬ 
tion security as a regular component of their 
agency oversight hearings, particularly dur¬ 
ing the implementation of major computer- 
related programs in agencies. Congress could 
hold hearings on the willingness of informa¬ 
tion system vendors to build appropriate secu¬ 
rity measures into their products. One secu¬ 
rity expert speculated that the visibility of 
congressional hearings might be the most ef¬ 


fective way to motivate vendors to build in 
such security, just as car manufacturers rou¬ 
tinely include safety features such as seatbelts. 49 

Congress could also maintain close congres¬ 
sional oversight of the implementation of 
NSDD 145. Possible topics for oversight in¬ 
clude the roles of the military and civilian 
agencies concerning protection of sensitive, 
unclassified information; the scope and degree 
of control NTISSC and NSA exert; the effec¬ 
tiveness of the new policy in promoting bet¬ 
ter information security; and the relation of 
NSDD 145 to OMB's Circular A-130. 

Revised Information Security Budget 
Procedures 

The budget procedures could be changed to 
provide more visibility for computer and tel¬ 
ecommunications security in agency budget 
requests. Agencies usually do not break out 
their expenditures for information security, 
making oversight and cross-agency compari¬ 
sons difficult. Agencies could specify their ex¬ 
penditures for security (both for staff and as 
components of information system operating 
expenses) and/or OMB could conduct a special 
analysis on this topic. The intent of this would 
be to make oversight of information security 
easier; a possible drawback is the additional 
paperwork that it would generate for the agen¬ 
cies or OMB. OMB and/or GAO 60 could first 
study in more depth the implications of such 
a change in budgeting procedures. As an alter¬ 
native, Congress and/or OMB could request 
and examine the information security budgets 
that agencies will be submitting to NTISSC, 
and could examine closely the portions of 
agencies' annual internal control reports (sub¬ 
mitted under the Federal Managers Financial 
Integrity Act of 1982) that relate to informa¬ 
tion security. 

"OTA interview with Robert Courtney, J r., J uly 1985. 

'"GAO'S recent survey of 25 key Federal computer systems 
noted that agencies tend to be unable to account for security 
costs, and argued that lack of such accounting can lead to "un¬ 
controlled overprotection, failure to identify inadequate con¬ 
trols, resource conflicts leading to inadequate safeguards, in¬ 
ability to monitor cost-effectiveness of controls, compare costs, 
monitor plans, etc." (Statement of William S. Franklin, GAO, 
before the Subcommittee on Transportation, Aviation, and Ma¬ 
terials, app. Ill, Oct. 29, 1985, pp. 14.) 
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Designate Civilian Agency for Information 
Security Training 

An existing civilian agency could be desig¬ 
nated to provide training and support for com¬ 
puter and telecommunications security in the 
civilian sector of government. Representative 
Dan Glickman has proposed a bill, entitled the 
Computer Security Research and Training Act 
of 1985 (H.R. 2889), which would formally des¬ 
ignate NBS as a lead agency to do background 
research and establish guidelines for agencies' 
security training. In addition to the formal 
designation, the legislation could provide ad¬ 
ditional operating funds for NBS in this area. 
Such a measure could strengthen the techni¬ 
cal resources on information security on the 
civilian side of government, help ensure that 
nonmilitary security needs are met, and reduce 
the I i kel i hood that N CSC wi 11 have a monop¬ 
oly on computer security policy and practices. 
On the other hand, this could result in some 
duplication of effort (although not necessarily 
undesirable) between the civilian and military 
sectors. 

The Administration has argued that H.R. 
2889 is unnecessary because NBS already has 
an implied mandate to conduct information 
security research through the Brooks Act of 
1965. They also point out that NBS and NSA 
work together well and coordinate their activ¬ 
ities in information security. While both of 
these points are essentially correct, H.R. 2889 
would strengthen and clarify the role of NBS 
in the new security policy framework of NSDD 
145. 

Of course, funds for NBS's work in informa¬ 
tion security could be increased without for¬ 
mally changing the status or designation of 
NBS in this area. 

Revise or Clarify NSDD 145 

Congress could codify part or all of NSDD 
145 into-law, clarifying the roles of NSA, GSA, 
OMB, NBS, and others in the process. Such 
an effort should include examining the roles 
of the central agencies in developing informa¬ 
tion security policy. To some extent, NSDD 
145 contradicts congressional mandates giv¬ 


ing OM B and GSA authority to set policy re¬ 
garding information technology. Codification 
could help establish a proper congressional 
role in development of information security 
policy; on the other hand, a congressionally de¬ 
veloped and monitored statute may be less 
flexible than a Presidential directive, and 
might hinder the effective implementation of 
NSDD 145. 

Congress or the executive branch could re¬ 
work the structure and intent of NSDD 145. 
The degree to which it is appropriate to change 
NSDD 145 is largely dependent on how much 
Congress objects to placing NSA and DOD in 
charge of this aspect of national information 
policy. NSA and DOD have been, and will 
likely continue to be, very significant players 
in information security. In fact, NTISSC it¬ 
self seems to be a very useful device for agen¬ 
cies to coordinate policy and share ideas on 
information security. However, by codifying 
NSDD 145 Congress could remove those aspects 
of NSDD 145 that give NSA and NTISSC ap¬ 
proval authority over civilian agencies' 
budgets and determinations of information 
sensitivity. In such a codification, Congress 
could also develop its own definition of sensi¬ 
tive information that would determine in a 
general sense the kinds of information agen¬ 
cies should protect. Such an action would 
diffuse some of the authority of NSA and 
NTISSC, and thus could dilute some of the po¬ 
tential leadership these groups could assert to 
improve information security. This option im¬ 
plicitly accepts some dilution of effectiveness 
in return for a lesser degree of military/na¬ 
tional security control over information sys¬ 
tems security policy. 

The version of H.R. 2889 as amended by the 
House Committee on Government Operations 
essentially reworks NSDD 145, giving NBS 
primary authority for computer security re¬ 
search and training programs for systems that 
are not used for critical military or intelligence 
applications. 51 The advantage to defining the 


"Specifically, H.R. 2889 limits NBS's authority to those 
Systems that are covered by the Brooks Act or Paperwork Re- 
duction Act. The wording of those acts explicitly excludes juris- 

(continued on next page) 
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NBS role this way is that there is a much 
cleaner distinction between the roles of NBS 


(continued from pra/ious page) 

diction over information technology that: 1) involves intelligence 
activities; 2) involves cryptologic activities related to national 
security; 3) involves the direct command and control of mili¬ 
tary forces; 4) involves equipment which is an integral part of 
a weapon or weapons system; or 5) is critical to the direct ful¬ 
fillment of military or intelligence missions, provided that this 
exclusion shall not include automatic data processing or tele¬ 
communications equipment used for routine administrative and 
business applications such as payroll, finance, logistics, and per¬ 
sonnel management (44 U.S.C. 3502). 


and NSA than there is between information 
"the loss of which could adversely affect the 
national security interest" and other informa¬ 
tion. Thus, such a definition could also help 
to alleviate concerns about placing the na¬ 
tional security community in a controlling po¬ 
sition over unclassified civilian information 
policy. On the other hand, this might work 
against one of the key purposes of NSDD 145, 
namely, the desire to improve security of in¬ 
formation that was not classified but still crit¬ 
ical to the national interest. 


APPENDIX 4A.-HIGHLIGHTS OF INFORMATION SECURITY 
POLICIES OF SELECTED AGENCIES 


Department of Agriculture "ADP Security 

Manual," DM3140-1, July 19, 1984: 

-Separates Automatic Data Processing (ADP) fa¬ 
cilities into Type I (large, multi-agency, general 
purpose facilities), Type II (general purpose 
computers serving multiple users concurrently), 
and Type 111 (other data and word processing 
equipment). 

-Designates application systems as sensitive if 
compromise could result in fraud or illegal gains, 
failure to produce time-critical data, violation of 
national defense disclosure requirements, un¬ 
authorized disclosure of private or proprietary 
data, adverse effect on ongoing investigations 
or agency operations, or adverse effect in life- 
threatening situations. 

-Requires adequate physical security, designated 
security officers, annual security reviews, secu¬ 
rity plans, and backup and contingency plans for 
critical systems. Facility managers may deter¬ 
mine the need for software access controls, data 
and software protection, and audit trails. 

Department of the Treasury: "I nformation Sys¬ 
tems Security," Directives Manual chapter TD 81 , 

Section 40, April 2, 1985: 

-information processed, stored, or communicated 
by information systems will be placed in three 
basic categories: national security, sensitive, and 
public information. 

—Sensitive information includes delicate, sensi¬ 
tive, regulatory, financial, law enforcement, pri¬ 
vacy, life and mission critical, and proprietary 
information as well as Officially Limited Infor¬ 
mation. 


-Unauthorized disclosure or manipulation of sen¬ 
sitive information could cause damage such as 
loss of life or personal injury, loss of property 
through fraud or theft, loss of privacy, impair¬ 
ment of enforcement or regulatory functions, un¬ 
fair personal or commercial advantages, or dam¬ 
age to businesses' proprietary secrets. 
Department of the Treasury: "E lectronic F unds 
and Securities Transfer Policy, " Directives Man¬ 
ual chapter TD 81, Section 80, August 16, 1984: 
-Requires the use of the Data Encryption Stand¬ 
ard to authenticate electronic funds transactions 
by the Federal Government. All Federal EFT 
systems shall be in compliance by J une 1, 1988. 

U.S. Geological Survey: "Management and Use 
of Small Computer Systems, " Handbook 500-16 - 
H, J uly 1985: 

-Requires small computers to be physically se¬ 
cured during nonbusiness hours or when left un¬ 
attended. 

-Requires backup copies of vital data stored in 
a separate location. 

-Requires users and owners to conduct a risk 
analysis. 

Department of Defense: "Security Require¬ 
ments for Automatic Data Processing Systems, 
Directive 5200.28, December 18, 1972 (with revi¬ 
sions, April 29, 1978): 

-Emphasizes that ADP systems must be de¬ 
signed with security in mind, and acknowledges 
the difficulty of adding security measures to sys¬ 
tems already in place. 

-Describes in very brief and general terms prin¬ 
ciples for ADP security needs for systems with 
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different levels of classified information and 
users with varying levels of security clearances. 

-Directs the Assistant Secretary of Defense 
(Comptroller) to develop and update a manual 
for ADP security, and to establish a central 
DOD capability to assist and advise defense 
agencies in ADP security. 

-Requires the head of each DOD component to 


designate an official to review ADP applications 
and approve their security safeguards. 

-Sets broad goals for ADP security-individual 
accountability, environmental control, system 
stability, data integrity, system reliability, com¬ 
munication link security, and appropriate han¬ 
dling of classified material. 


APPENDIX 4B.-HIGHLIGHTS OF FINDINGS ON 
INFORMATION VULNERABILITY BY THE NATIONAL 
TELECOMMUNICATIONS AND INFORMATION 
ADMINISTRATION (NTIA) 


1. There is no standardized concept of "informa¬ 
tion sensitivity" among the agencies, and gov¬ 
ernment employees generally are unfamiliar 
with the term .... In contrast to the strong for¬ 
mal programs of [national] security education 
administered by most agencies, employees are 
not at all trained in identifying unclassified in¬ 
formation which must be protected. [Exceptions 
include some aspects of protecting documents 
classified "For Official Use Only" or covered by 
the Privacy Act.] 

2. There is minimal awareness of the vulnerabili¬ 
ties of agency telecommunication facilities to in¬ 
terception. 

3. The general failure of government employees 
and managers to appreciate the threat to vul¬ 
nerable telecommunications is understandable. 
Much of the information available on suspected 
threats to government communications derives 
from intelligence sources and is classified. It is 
quite possible, however, to educate employees 
about potential threats without divulging any 
classified information. 

4. Unclassified information is freely communicated 
over unprotected circuits without regard to sen¬ 
sitivity. 


5 . Available telecommunications protection re¬ 
sources are underused or are not used at all. 

6 . Some stereotyped communications patterns 
compound the vulnerability problems, [such as] 
regularly scheduled conference calls which link 
agencies' top management over private circuits 
... and the use of fixed radio frequencies. 

7 . A reliance on private lines adds to the vulnera¬ 
bility of sensitive telecommunications ... , The 
problems facing the would-be interceptor are 
drastically reduced by the use of leased circuits 
as opposed to the use of the public network. 

8 . Communication systems managers are cur¬ 
rently unprepared to take on the foregoing 
problems. 

9 . Federal law enforcement activities present an 
entirely different perspective to the general 
problems of threat and vulnerability .... Sev¬ 
eral law enforcement agencies are seeking equip¬ 
ment solutions to the vulnerability problems 
they perceive. NTIA notes that these approaches 
are uncoordinated. 

SOURCE: National Telecommunications and Information Administra¬ 
tion, “Summary of Findings of Telecommunications and In¬ 
formation Vulnerability Surveys, Mar. 1 8,1983. 
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Chapter 5 

Computer Crime 


SUMMARY 


This chapter focuses on evaluating the na¬ 
ture and scope of computer crime, and options 
to consider in designing effective computer 
crime legislation. Computer crime is defined 
here simply as a set of crimes in which com¬ 
puterized data or software play a major role. 
It is largely the intangible (but critically im¬ 
portant) nature of computerized information 
that creates a need for special legislative at¬ 
tention to computer crime. 

Since the 1970s, there has been a growing 
consensus that existing laws covering the va¬ 
riety of crimes that can be committed using 
a computer (e.g., fraud, theft, embezzlement, 
invasion of privacy, trespass) either do not 
cover some computer abuses, or are not strong 
and clear enough to discourage computer 
crimes and allow expeditious prosecution. 

Some of this consensus is a result of public¬ 
ity regarding "hackers" penetrating various 
computer systems. The hacker issue is fre¬ 
quently blown out of proportion, and although 
it cannot be ignored, crimes committed by dis¬ 
honest or disgruntled employees who have au¬ 
thorized access to computers represent a far 
greater source of risk than outsiders penetrat¬ 
ing information systems. 

After a decade of examining computer 
crime, Congress passed the Counterfeit Access 
Device and Computer Fraud and Abuse Act 
of 1984. The act provides a felony penalty for 
those who gain unauthorized access to com¬ 
puterized classified information, and a mis¬ 
demeanor penalty for unauthorized access to 
the computerized information of financial in¬ 
stitutions or the Federal Government. In addi¬ 
tion, 45 States have passed computer crime 
laws. 

OTA's major findings in this area arethat: 

• There is a scarcity of reliable information 
about the amount of computer crime oc¬ 


curring and the nature and severity of the 
crimes. The available evidence suggests 
that significant losses have occurred, 
though the full extent is unknown. 

• Despite the lack of hard information, the 
vulnerabilities of organizations using com¬ 
puter systems are much greater than in 
the past, as discussed in chapter 4 on in¬ 
formation systems security. Thus a con¬ 
sensus has emerged that a combination 
of Federal and State laws is appropriate 
in this area. Actions taken so far have set 
forth de facto Federal and State roles— 
namely, that while State laws will play a 
primary role in most cases, Federal leg¬ 
islation will concentrate on areas of spe¬ 
cial Federal concern. 

• Legislation needs to balance concern 
about the potential urgency of the situa¬ 
tion with other factors—in particular, the 
responsibilities of vendors, owners, and 
users for the security of their systems, 
and the need for keeping computer crime 
sanctions reasonably consistent with 
other criminal law and other aspects of 
U.S. information policy. 

There has been substantial interest in fur¬ 
ther legislative action on computer crime in 
the 99th Congress. The legislative debate and 
hearings have identified the following actions 
that could clarify and/or strengthen the Fed¬ 
eral role in monitoring, preventing, and pro¬ 
secuting computer crime: 

• extend the current Federal statute (Com¬ 
puter Fraud Act) to cover interstate crimes 
affecting private sector companies, while 
placing some limits on Federal jurisdiction; 

• amend the conceptual approach to defin¬ 
ing computer crime used in the Computer 
Fraud Act, for example, by focusing on 
the type of crime committed and/or the 
kinds of information unlawfully accessed; 
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• change or clarify the kinds of computer¬ 
ized information covered by the Computer 
Fraud Act, e.g., by restricting the portion 
of the act that outlaws unauthorized dis¬ 
closure of information from Federal com¬ 
puters to apply only to Privacy Act infor¬ 
mation; 

• extend or clarify the definitions of key 
terms used in the Computer Fraud Act, 
such as the definition of authorization; 

• enact limited protection to computer 


crime victims in order to encourage prose¬ 
cution; 

• enact a penalty for computer crime con¬ 
victions that would include forfeiture of 
equipment used; 

• establish strengthened or new reporting 
systems for monitoring the nature and 
scope of computer crime; and 

• establish a study commission to address 
computer crime (and perhaps related) 
issues. 


INTRODUCTION 


As noted in chapter 4, there are four major 
kinds of measures to protect information sys¬ 
tems—technical, physical, administrative, and 
legislative. The first three were emphasized in 
chapter 4; this chapter will focus on the prob¬ 
lem of designing and implementing Federal 
legislation that pertains to computer crime. 

Generally, computer crime is a term used to 
refer to a loose set of frauds or abuses in which 
computerized data or software play a major 
role. The Department of J ustice's Criminal 
J ustice Resource Manual defines computer- 
related crime as "any illegal act for which 
knowledge of computer technology is essen¬ 
tial for successful prosecution. '"Although 
some would include theft or physical vandal¬ 
ism of the computer itself in the category of 
computer crime, the focus of this chapter is 
on acts that involve manipulation (or theft) of 
the content of computers—data—for criminal 
purposes. It is largely the intangible (but crit¬ 
ically important) nature of computerized infor¬ 
mation that makes computer crime a differ¬ 
ent kind of criminal act needing special 
legislative attention. 


'National Criminal J ustice Information and Statistics Serv- 
icefnow Bureau of J ustice Statistics), U.S. Department ofj us¬ 
tice, Computer Crime Criminal J ustice Resource M anual, 1979. 
(The report was produced by SRI I nternational under contract). 
The terms "computer-related crime" and "computer crime" will 
be used interchangeably in this chapter for the sake of simplicity 
and adherence to current usage. Computer-related crime is, in 
a strict sense, more accurate, since in many cases the computer 
is not the central focus of crime, but rather a tod or a peripheral 
aspect. (Some would prefer the term "information crime, "since 
the important aspect of the act is not the effect on the machine, 
but the effect on the information it stores and manipulates.) 


As table 5-1 notes, the computer can be used 
as a tool or instrument in a variety of activi¬ 
ties that resemble distinctly different kinds of 
"conventional' crimes. While some computer 
crimes, for example, clearly look like embez¬ 
zlement, others seem more akin to vandalism 
or the electronic equivalent of "joyriding." 
This wide variation in the nature of computer 
crimes is one of the factors that makes effec¬ 
tive, comprehensive, and equitable legislation 
difficult to design. 

Another aspect of computer crime that pre¬ 
sents a challenge to effective legislation is the 
strong connections between this area of leg¬ 
islation and other social and administrative 
implications of information technology. For 
example: 

• Computer security is clearly closely re¬ 
lated, in the sense that computer crime 
laws are part of the arsenal of security 
measures, hopefully discouraging com- 


Table 5-1.—Types of Computer Crime 


End result of the crime 

“Conventional” crime 
it resembles 

Use of computers to embezzle 
funds or assets. 

. Embezzlement 

Destruction or alteration of 
software or data. 

. . Vandalism or fraud 

Unauthorized access to and/or 
theft of software or data. 

.Theft or trespass 

Unauthorized use of computers 
and computer services. 

Petty theft, embezzlement, 


or joyriding 


SOURCES: Office of Technology Assessment; and American Bar Association, 
“Report on Computer Crime, ’’ 1984. 
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puter abuse as well as providing a re¬ 
course of last resort for those crimes that 
do occur. 

• Privacy is related to computer crime in 

that such crimes may involve unautho¬ 
rized access to personal information. 

• Intellectual property issues are related to 

computer crime insofar as computerized 
piracy of software, for example, is a sub¬ 
set of computer crime more generally. 2 


A related Office of Technology Assessment study, "I ntel- 
lectual Property Rights in an Age of Electronics and Informa¬ 
tion" (forthcoming in 1986), is examining these and related is¬ 
sues in detail. 


The pivotal nature of computer crime makes 
it important to recognize these connections in 
the legislative process to ensure that Federal 
policies in these areas work in concert. 


BACKGROUND 


The prime motivating factor for computer 
crime laws has been the increasingly wide¬ 
spread perception that current laws covering 
the variety of crimes that computer abuse re¬ 
sembles (e.g., fraud, theft, embezzlement, and 
trespass) either do not cover some abuses, or 
are not strong and clear enough to discourage 
computer crimes and allow expeditious prose¬ 
cution. 3 

It is important to distinguish at the outset 
between computer crimes committed by out¬ 
siders who penetrate a system through com¬ 
munication lines (commonly known as "hack¬ 
ers " 4 ) and crimes committed by insiders who 
are authorized to use the computer. The hacker 
problem has aroused a great deal of media at¬ 
tention, and some of the motivation to finally 
take action on computer crime legislation 


‘See, for example, House Judiciary Subcommittee on Crime 
hearings on Counterfeit Access Device and Computer Fraud 
and Abuse Act of 1984, Sept. 29, 1983, Nov. 10, 1983, and Mar. 
28, 1984; Raymond Natter, Congressional Research Service, 
“Federal Criminal Jurisdiction Under S. 240, 96th Congress: 
The Computer Crime Bill,’” Mar. 5, 1979; Nancy Finn and Peter 
Finn, “Don’t Rely On the Law To Stop Computer Crime, ” Com- 
puterworld, Dec. 17, 1984. 

‘This chapter uses a working definition of hackers as out¬ 
siders who penetrate a computer system they are not author¬ 
ized to use through communications lines. The etymology of 
the term is somewhat controversial. Different writers use the 
term "hacker" to refer to a skilled computer programmer, a com¬ 
puter addict who knows the computer intimately but cannot 
communicate well with people, or a gifted but sloppy pro¬ 
grammer. 


seems to be rooted in this phenomenon. The 
Nation has at times been alternately amused 
and terrified by reports of teenaged computer 
hobbyists entering computer systems at Los 
Alamos National Laboratory, Memorial Sloan- 
Kettering Cancer Center, and many others. 
OTA's analysis has led to the following obser¬ 
vations: 

• There are important differences between 
hackers who are young experimenters and 
hobbyists and those who are well-fi¬ 
nanced, sometimes malicious criminals. 
There is no question that the significance 
of teenaged hackers has been overblown. 
Close examination of many of the inci¬ 
dents tends to reveal that little actual 
damage was done,' or that simple safe¬ 
guards (e.g., better password control, or 
dial-back modems) could have prevented 
the incident. This leaves at least some 
responsibility in the hands of the system 
owners who chose not to take "due care" 
in using such safeguards. 


“Many incidents of computer hacking have resulted in re¬ 
ports of many thousands of dollars in damages, and some inci¬ 
dents doubtless have caused delays and damage. The quantita¬ 
tive estimates of damage are difficult to evaluate, however, 
because they may include, for example, the costs of damaging 
publicity about the incident (which are somewhat speculative), 
or the costs of installing system security measures to prevent 
an incident from recurring (which are not "damages" but pre¬ 
ventive measures that arguably should have been taken before 
the original incident occurred). 
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• Nevertheless, there is a growing segment 
of hacking that is more serious. Some of 
the reports of crimes committed by hack¬ 
ers seem to indicate a growing level of 
harm, and there are some reports of in¬ 
creasing involvement of organized crime 
in hacking, for example. 6 Thus hacking 
cannot be ignored as a component of the 
computer crime problem. 

• However, as discussed in the previous 
chapter, computer and security experts 
are nearly unanimous in their view that 
the significance of outside penetration 
into computer systems pales in compari¬ 
son with abuses by insiders who are au¬ 
thorized to use the computer. Like other 
kinds of white-collar crime, many of these 
incidents probably are not reported to law 
enforcement authorities. External threats 
may grow in severity, however, as com¬ 
puters are more and more frequently 
linked by telecommunications systems. 

Thus, in designing effective legislation, it is 
essential to keep in mind the "insider' crimes 
that have recently received considerably less 
public attention than have hackers. 

Legislative interest. The 94th Congress was 
the first to consider the subject of computer 
crime. 7 ln addition to several celebrated frauds 
affecting the private sector in the early 1970s, 
a 1976 report of the General Accounting Of¬ 
fice identified 69 instances of computer-related 
crimes affecting Federal programs, with re¬ 
sulting losses of over $2 millions 


“Dorm B. Parker and John F. Maxfield, “The Nature and 
Extent of Electronic Computer Intrusion, ” paper prepared for 
National Science Foundation Workshop on “Protection of Com¬ 
puter Systems and Software, ” Oct. 19, 1984. 

‘See, for example, Senate Committee on Government Oper¬ 
ations, Problems Associated With Computer Technology in Fed¬ 
eral Programs and Private Industry: Computer Abuses, June 
1976. 

‘U.S. General Accounting Office, “Computer-Related 
Crimes in Federal Programs, ” Apr. 27, 1976, FGMSD-76-27. 
The most famous computer-related crime of the early 1970s was 
the “Equity Funding” scandal of 1973. Although the fraud did 
not involve any sophisticated manipulations of a computer, a 
computer system was used to generate $2.1 billion in fictitious 
policies. The fraud was based on a pyramid scheme, in which 
funds from new investors were used to pay off old ones. 


Senator Abraham Ribicoff, Chairman of the 
Senate Committee on Government Operations 
(now Governmental Affairs), first introduced 
the "Federal Computer Systems Protection 
Act of 1977" in the 95th Congress, and then 
sent a modified version of the so-called "Ribi¬ 
coff bill" to the 96th Congress. The bill defined 
crimes related to: 

• the introduction of fraudulent records or 
data i nto a computer system; 

• the unauthorized use of computer-related 
facilities; 

• the alteration or destruction of informa¬ 
tion or records; and 

• the stealing, whether by electronic means 
or otherwise, of money, financial instru¬ 
ments, property, services, or valuable 
data.' 

Neither the 95th nor the 96th Congresses 
took final action on this proposal; one of the 
chief barriers was a concern that the bill ex¬ 
panded Federal jurisdiction too broadly. Since 
these groundbreaking efforts in this area, both 
the Congress and State legislatures have con¬ 
sidered a myriad of bills, many of them pat¬ 
terned after Ribicoffs original effort. As of 
late 1985, 45 States have some kind of com¬ 
puter crime Legislation.'" Representative Bill 
Nelson, after helping to pass an innovative 
computer crime bill in the Florida State legis¬ 
lature in 1978, introduced a modified version 
of the Ribicoff bill in the 97th Congress (H.R. 
3970, The Federal Computer Systems Protec¬ 
tion Act of 1981). 11 

“Louise Becker, Computer Abuse and Misuse, Institute for 
Defense Analyses, December 1984, p. 29. This document also 
summarizes the legislative history. 

“’Jay Bloombecker, National Center for Computer Crime 
Data, Los Angeles, CA, personal communication, February 
1986. The five States Bloombecker reports that do not have 
computer crime laws are New York, Vermont, West Virginia, 
Indiana, and Arkansas. The District of Columbia’s computer 
crime law is also still under consideration. Bloombecker also 
reports that three States (Massachusetts, Maine, and Ohio) that 
are included in the total of 45 made only a minor modification 
to their criminal code to include data or computer services in 
the definition of property or services that Can be the Subject 
of theft. 

'The innovative aspect of Florida's computer crime bill is 
that it defines two new classes of offenses: an offense against 
intellectual property, and an offense against the authorized com¬ 
puter user. (Finn and Finn, op. cit. ) 
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As interest intensified (in part because of 
media reports concerning hackers), the 98th 
Congress considered at least 10 different legis¬ 
lative measures related to computer crime. 
(See table 5-2 for the titles and essential 
aspects of the bills proposed in the 98th 
Congress.) 

Ultimately, under the leadership of Repre¬ 
sentative William Hughes, Chairman of the 
House Committee on thej udiciary, Subcom¬ 
mittee on Crime, and sponsor of H.R. 5616, 
the 98th Congress in its final hours passed an 
amended version of H.R. 5616 as the Counter¬ 
feit Access Device and Computer Fraud and 
Abuse Act of 1984. (This will be referred to 
in this chapter as the Computer Fraud Act.) 


In drafting the bill, Representative Hughes fo¬ 
cused on "trespass"—i.e., unauthorized access 
to specific kinds of information, rather than 
focusing on the "mere use" of the computer 
to commit an offense.” Thus, the bill provides 
a felony penalty for unauthorized access to 
classified information, and a misdemeanor 
penalty for unauthorized access to the com¬ 
puterized information of financial institutions 
or the Federal Government. Two further sec¬ 
tions of H.R. 5616 that covered any conduct 
that "affects interstate or foreign commerce" 
were deleted in final negotiations with the Sen- 


‘-House Report 98-894 to accompany H.R. 5616. July 24, 
1984, p. 20. 


Table 5-2.—The 98th Congress: Essential Characteristics of Computer Crime Bills 


Bill 


Action in 98th Congress 


Jurisdiction 


Counterfeit Access and Com¬ 
puter Fraud and Abuse Act of 
i984. Public Law 98-473 (H. R 
5616, Rep. Hughes) 


Federal Computer Systems 
Protection Act of 1984 (intro 
duced for the Administration 
by Sen. Thurmond, S. 2940) 

Federal Computer Systems 
Protection Act of 1983 (HR. 
1092, Rep. Nelson/S 1733, 
Sen Tnble) 


Passed in continuing resolution, 
hearings held by House Judiciary 
Subcommittee on Crime, 9/29/83; 
11/10/83,3128184 


Referred to Senate Judiciary 


Subject of hearing by House Judi¬ 
ciary Subcommittee on Civil & 
Constitutional Rights 11/18/83 


1) Classified information 

2) Federal information systems 

3) Financial institution information 
(deleted sections covering sys¬ 
tems affecting interstate 
commerce) 

1) Government computer systems 

2) Financial institution computers 

3) Crimes involving two or more 
computers in different States 
(or countries) 

1) Government computer systems 

2) Financial institution computers 

3) Computers used in interstate 
commerce 


Computer Crime Prevention 
Act of 1984 (S. 2270, Sen 
Cohen) 


Medical Records Protection 
Act of 1984 (HR. 4954, Rep 
Wyden) 


HR. 4384 (Rep, Mica) 


HR. 4301 (Rep. Coughlin) 


Small Business Computer 
Security and Education Act 
Of 1984, Public Law 98-362 
(H.R. 3075, Rep. Wyden; S. 
1920, Sen. Tsongas) 
Amendment 7101 (Senators 
Leahy, Mathias, Kennedy, 
Baker) 


Referred to Senate Judiciary 


Hearings by House Energy & 
Commerce, House Judiciary Sub¬ 
committee on Civil & Constitu¬ 
tional Rights, 416184, 819184 

Hearings by House Judiciary, Sub¬ 
committee on Civil & Constitu¬ 
tional Rights 11/18/83 

Hearings by House Judiciary Sub¬ 
committee on Civil & Constitu¬ 
tional Rights 11/18/83 
Passed, hearings by House Judici¬ 
ary Subcommittee on Anti-trust, 
7/14/83, Senate Small Business, 
317184 

Passed by Senate Oct. 11, 1984; 
dropped in conference 


1) Government computers 

2) Financial institution computers 

3) Computers used in interstate 
commerce 

1) Medical records 


1) Government computer systems 

2) Financial institution computers 

3) Computers used in interstate 
commerce 

1) Interstate or foreign commerce 


1) Small business 


1) Privacy data (restricting 
Hughes bill jurisdiction over 
Federal information) 


Important features 

Oriented toward “trespass,' i.e., 
improper access to the kinds of 
information defined at left. Gives 
Secret Service joint investigative 
authority 

Oriented toward using computer 
for fraud, damage to systems, un¬ 
authorized access. Includes forfei¬ 
ture of interest in equipment used 
to perpetrate crime 
Oriented toward using computer 
for fraud, and damage to system 
or data. Derived from Ribicoff bill. 
Allows State jurisdiction to super¬ 
sede Federal 

Oriented toward fraud, damage, 
unauthorized use. Same State role 
as H.R. 1092 


Unauthorized access—misde¬ 

meanor; unauthorized access and 
tampering—felony 

Incorporated H.R. 1092 but also 
sets up computer security re¬ 
search and interagency committee 
on computer crime 
3-paragraph bill with harsh penal¬ 
ties for abuse 

Provides information to small bus¬ 
inesses to protect them from com¬ 
puter abuse. Establishes council 
to advise SBA on computer 
crimes 

See text for discussion 


SOURCES Office of Technology Assessment, using bill texts and hearing reports; and L Becker, Computer Fraud and Abuse, December 1984 
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ate. One clause would have provided a felony 
penalty for unauthorized access for the pur¬ 
pose of deliberate fraud resulting in a gain of 
$5,000 or more within a I-year period; the 
other would have provided a misdemeanor 
penalty for any unauthorized access to com¬ 
puterized information causing a $5,000 gain 
(for the defendant) or loss (for another) in a 1- 
year period. 

The 98th Congress also passed the Small 
Business Computer Security and Education 
Act of 1984, which provides information to 
small businesses to protect them from com¬ 
puter abuse. While this act does not establish 
criminal sanctions for computer crimes, its ad¬ 
visory mechanisms could provide further in¬ 
formation to help assess the magnitude of the 
computer crime problem. 

I n the 99th Congress, there has been sub¬ 
stantial interest in further legislative action 
in this area. Several of the key lawmakers from 
the debates in the 98th Congress have intro¬ 
duced bills to supplement or change the Com¬ 
puter Fraud Act, as noted in table 5-3, and two 


other hearings have been held on the topic. 13 
The actions proposed in the 99th Congress re¬ 
spond to three major sets of concerns about 
the Computer Fraud Act: 

1. A variety of lawmakers and stakeholders 
have argued that Federal law should cov¬ 
er interstate private sector computer 
crimes in some way. H.R. 1001, intro¬ 
duced by Representative Hughes, reintro¬ 
duces the sections on this topic deleted 
from the original H.R. 5616. Several of 
the other measures, H.R. 930 and S. 440, 
as well as the Administration's bill, H.R. 
3381/S. 1678, also expand the law to cover 
interstate crimes. 

2. Some analysts, principally in the civil lib¬ 
erties community, have expressed a con¬ 
cern that the wording of Section 3 of the 
Computer Fraud Act (specifically the out¬ 
lawing of unauthorized disclosure of in- 


“House Judiciary Subcommittee on Crime, Hearing on 
H.R. 1001 and H.R. 930, May 23, 1985; and Senate Judiciary 
Subcommittee on Criminal Law, Hearing on Computer Fraud 
Legislation, Oct. 30, 1985, 


Table 5-3.—The 99th Congress: Essential Characteristics of Proposed Legislation 


Bill 

Important features 

Action in 99th Congress 


Counterfeit Access Device and Computer 
Fraud and Abuse Act of 1985 [amendment] 
(H.R. 1001, Rep. Hughes) 

Revises the act to add conduct “affecting 
interstate commerce, ” wording that was 
deleted from original bill 

House Judiciary Subcommittee on 
held hearings 5/23/85 

Crime 

Computer Systems Protection Act of 1985 
(S 440, Sen, Trible) 

Defines jurisdiction to include computers 
that “operate in, or use a facility of, inter¬ 
state or foreign commerce. ” Includes limi¬ 
tation mechanism on Federal jurisdiction, 
refines definitions 

Senate Judiciary Subcommittee on Crimi¬ 
nal Law held hearings 10/30/85. Committee 
also requested comment from Justice and 
Treasury Departments 

National Computer Systems Protection Act 
of 1985 (H. R. 930, Rep. Nelson) 

Similar to above 

House Judiciary Subcommittee on 
held hearings 5/23/85 

Crime 

Medical Records Protection Act of 1984 
(H.R. 995, Rep. Wyden) 

Affects unauthorized access to medical 
records through telecommunications de¬ 
vice. Provides misdemeanor for access, 
felony for tampering 

Referred to House Energy and Commerce 
and House Judiciary Committees 

S. 610 (Senators Mathias, Leahy, Kennedy, 
and Cohen) 

Amends the act to make unauthorized dis¬ 
closure of Federal computerized informa¬ 
tion a crime only if information is covered 
by the Privacy Act 

Referred to Senate Judiciary, Subcommit¬ 
tees on Constitution and on Criminal Law. 
Committee requested comment from Jus¬ 
tice Department 

Federal Computer System Protection Act 
of 1985 (S. 1678, Sen. Thurmond; H.R. 

3381, Rep. McCollum) 

Administration bill. Outlaws use of com¬ 
puter to commit fraud, contains forfeiture 
provision for those convicted 

Senate Judiciary Subcommittee on 
nal Law held hearings 10/30/85 

Crimi- 

Computer Pornography and Child Exploita¬ 
tion Prevention Act of 1985 (S. 1305, Sen. 
Trible) 

Prohibits transmission of lewd or obscene 
material via computer, especially child por¬ 
nography 

Senate Judiciary Subcommittee on 
nile Justice held hearings 10/1/85 

Juve- 


SOURCE Office of Technology Assessment Compiled January 1986 
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formation in Federal Government com¬ 
puters) could be used to restrict informal 
information flows from government em¬ 
ployees to the public or the press. During 
the 98th Congress, the Senate amended 
this portion of the bill to restrict its scope 
so that a person could only be prosecuted 
for unauthorized disclosure of personal 
(Privacy Act) information. However, this 
amendment was not incorporated in the 
fi nal versi on of the bi 11. I n the 99th Con¬ 
gress, S. 610 reintroduces this amendment. 

3. Some congressional witnesses have ar¬ 
gued that the act does not define crimes 
in a way that is clear and useful for prose¬ 
cutors, and that the penalties specified- 
misdemeanors except for crimes involv¬ 
ing classified information—are inade¬ 
quate. (See discussion below.) 

In addition, there appears to be substantial 
congressional interest in the related area of 
electronic eavesdropping and surveillance, as 
a result of H.R. 3378 and S. 1667, the Elec¬ 
tronic Communications Privacy Act of 1985, 
introduced by Representative Robert Kasten- 
meier and Senator Patrick Leahy. The bill 
would extend legal protections currently ap¬ 
plied to voice transmissions to virtually all 
electronic communications regardless of how 


they are transmitted. It also makes it a crime 
to obtain unauthorized access to electronic 
communications whilethey are stored in the 
computer of an electronic communication serv¬ 
ice, essentially a company providing message¬ 
handling services for electronic mail. Thus the 
bill would make two additions to computer 
crime law—protecting theft of data while it is 
being transmitted, and protecting messages 
in electronic mail systems. However, the bill 
does not protect stored data that is not asso¬ 
ciated with an electronic mail or communica¬ 
tion system, which is the principal focus of the 
laws discussed in this chapter* 

As legislative discussion on computer crime 
has progressed, many key issues and ques¬ 
tions have come into focus. I n some cases, pol¬ 
icymakers and stakeholders seem to be near¬ 
ing consensus; in others, there are clear 
differences in approach with which Congress 
must grapple. The following sections describe 
some of these areas of agreement and disagree¬ 
ment, and discuss opportunities for further 
action. 


*Fo,further discussion relevant to H.R. 3378 and S. 1667, 
see U.S. Congress, Office of Technology Assessment, Federal 
Government I nf'ormation Technology: ElectronicSurt'eillance 
and Civil Liberties, OTA-CIT-293 (Washington, DC: U.S. Gov¬ 
ernment Printing Office, October 1985). 


MAJOR FINDINGS 


Finding 1 

There is a scarcity of reliable information 
about the amount of computer crime occur¬ 
ring and the nature and severity of the 
crimes. The available evidence suggests sig¬ 
nificant losses, though the full extent is 
unknown. 

Recently, considerable attention has been 
focused on computer crime, particularly the 
small component of such activity that is com¬ 
mitted by teenaged hackers. 14 Beyond anec¬ 
dotes provided by the media, a number of 
organizations have attempted to develop evi- 


"For examples of such attention, note Newsweek coverage 
of computer crime (Sept. 5,1983, pp. 42-48; and Aug. 29,1983, 
pp. 45-49): and the movie 'War Games." 


dence about the nature and scope of computer 
crime. Some of the highlights of these studies 
are reported below, with the caveats that each 
was limited in scope, was the first study of its 
kind, and had significant methodological 
flaws. Thus, the data and descriptions pro¬ 
vided below represent only an impressionistic 
sketch of the computer crime situation, not an 
authoritative picture. The policy discussion at 
the end of this chapter will discuss needs for 
further information about computer crime. 

Th e American Bar Association (ABA) 15 sur¬ 
veyed public and private sector organizations 

""Report on Computer Crime, "Task Force on Computer 
Crime, Section on Criminal J ustice, 1984. Also see analysis in 
Louise Becker, Computer Fraud and Abuse, Institute for De- 
fense Analyses, December 1984. 
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for their views on and experiences with com¬ 
puter crime. 16 Twenty-five percent (72) of the 
respondents reported "known and verifiable 
losses due to computer crime during the last 
12 months. " Fifty-four of the respondents re¬ 
ported that their total annual losses due to 
computer crime were between $0 and $100,000, 
while four respondents were in the $10 million 
to $50 million range, and one reported losses 
between $100 million and $500 million. The 
larger figures are staggering and, because the 
study was anonymous, cannot be substanti¬ 
ated. ABA notes that these figures cannot be 
extrapolated to the Nation as a whole and 
comments that many estimates of economic 
losses attributed to computer crime are "un¬ 
explained" and "unsupported." 

Th e American Institute of Certified Public 
Accountants 17 conducted a survey of 5,127 
banks and 1,232 insurance companies. Two 
percent (105) of the banks and 3 percent (40) 
of the insurance companies said they had ex¬ 
perienced at least one case of fraud related to 
electronic data processing (EDP), a dramati¬ 
cally lower proportion of crime incidence than 
the ABA study although the methodology for 
the two studies is quite different. The study 
was not intended to provide reliable data on 
the incidence or the magnitude of frauds in in¬ 
surance or banking, but rather to analyze the 
"general nature and means of committing 
some EDP-related frauds. " Table 5-4 indicates 
some of the schemes reported for these frauds, 
from most to least frequent. The most fre¬ 
quent perpetrators of these frauds were cleri¬ 
cal personnel (for smaller frauds) and mid-level 
management or supervisory personnel (for 
larger frauds). Only 16 percent of the frauds 
were reported to involve more than $100,000, 


"According to congressional testimony, “The survey was 

sent to approximately 1,000 private organizations and govern¬ 
ment agencies, including the Fortune 500 companies, banks, 
insurance companies, financial services, brokerage firms, ac¬ 
counting firms, all major Federal departments and agencies, 
all State attorneys general, and a sample of district attorneys. ” 
Responses were received from 283 organizations. (Testimony 
of Joseph B. Tompkins, Jr., to House Subcommittee on Trans¬ 
portation, Aviation and Materials, Sept. 24, 1984). 

‘“American Institute of Certified Public Accountants, EDP 
Fraud Review Task Force, “Report on the Study of EDP-Re- 
lated Fraud in the Banking and Insurance Industries,’” 1984. 


Table 5-4.—Commonly Reported Computer 
Crime Schemes in the AlCPA’s Study 
(from most to least frequent) 


Banking Insurance 

• Divert customer funds 
into perpetrator's own 
account 

• Make unauthorized 
extensions of credit 
limits, loan due dates 

• Create fictitious loans 

• Defer recording of 
perpetrator’s own 
checks and charges 

• Forge customer input 
documents (checks and 
withdrawals) 

• Make ATM extractions 

• Make adjustments to 
customer deposits 

• Divert loan payments 
into perpetrator's own 
account 

• Divert customer income 
to perpetrator’s own 
account 

• Wire transfer 


SOURCE American Institute of Certified Public Accountants. EDP Fraud Rewew 
Task Force, “Report on the Study of EDP.Related Fraud in the Banking 
and Insurance Industries, ” 1984. 

and that figure does not reflect any funds re¬ 
covered. 

In 1983, the President Council on Integrity 
and Efficiency released a report on the first 
phase of a study on computer-related fraud 
and abuse. The panel surveyed Federal agen¬ 
cies and found a total of 172 relevant cases (69 
fraud, 103 abuse). The losses in fraud cases 
ranged from $0 to $177,383, with the highest 
proportion in the $10,000 to $100,000 range. 
However, noting that many agencies do not 
keep reliable or systematic data in this area, 
the leader of the study told a congressional 
committee that: 

One overriding finding of this study is that 
we still do not know the scope of computer- 
related fraud and abuse in government, 'a 

A follow-on study by the Inspector General 
of the Department of Health and Human Serv- 


‘"Richard P. Kusserow, Inspector General, Department of 
Health and Human Services, testimony to House Subcommit¬ 
tee on Transportion, Aviation, and Materials, Sept. 24, 1984. 


• Create fictitious claims 

• Trigger unauthorized 
refund or reduction of 
premiums 

• Create unauthorized 
policy loans 

• Trigger unauthorized 
dividend withdrawals 

• Forge checks 

• Create unauthorized 
mortgage loans 

• Reinstate lapsed 
policies 

• Create fictitious pension 
payments 
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ices contained interviews and analyses of 46 
perpetrators of computer-related fraud cases 
in the Federal Government. Although it is not 
known to what extent these perpetrators are 
representative, in general they: 

• were insiders, and were typically young, 
well-regarded employees; 

• held a wide variety of positions, although 
most commonly were caseworkers, cleri¬ 
cals, or data-entry technicians; 

• typically committed their crime by manip¬ 
ulating input data to cause funds to be is¬ 
sued, and most were aided by co-conspir- 
ators; 

• committed the criminal activity over a 6- 
month period, on the average; 

• stole in responsetoa situational stress, 
such as personal indebtedness; and 

• didn't think about the consequences of 
their actions, or assessed the risks of get¬ 
ting caught as minimal, 'g 

The Department of J ustice Bureau of J us- 
ticeStatistics (BJ S) has commissioned vari¬ 
ous reports to try to assess the nature and 
scope of computer crime. One recent BJ S re¬ 
port examined the scope of fraud related to 
electronic funds transfer in a confidential sur¬ 
vey of 16 banks. Because of the small sample 
size, this pilot study's results should be viewed 
as suggestive only. The study estimated that 
banks nationwide lost $70 million to $100 mil¬ 
lion during 1983 from automatic teller fraud. 
This is only about 0.03 percent of a total vol¬ 
ume of $262 billion processed through auto¬ 
matic tellers, or a loss of 32 cents per $1,000 
of transaction volume. The study also exam¬ 
ined potential losses from wire transfers, al¬ 
though there were insufficient data to estimate 
national loss levels. Twelve banks reported 
139 wire transfer fraud incidents within the 
preceding 5 years, with an average exposure 
to loss (before recovery efforts) per incident 
of $883,279, and an average net loss (after re¬ 
covery efforts) per incident of $18,861. By 
comparison, roughly 60 million wire transfers 
were completed in 1980, involving$117 trillion. 20 

“’Richard P. Kusserow, “Computer-Related Fraud in Gov¬ 
ernment Agencies: Perpetrator Interviews, ” published by the 
Department of Health and Human Services, May 1985. 

“’Bureau of Justice Statistics Special Report NCJ-96666, 
“Electronic Fund Transfer Fraud, ” March 1985. 


Consultants and other researchers have also 
played significant roles in assessing the nature 
and scope of computer crime. In one recent 
study, two researchers conducted telephone in¬ 
terviews with 106 law enforcement officials 
and prosecutors in States that had computer 
crime statutes. Sixty-seven investigations un¬ 
der the new computer crime laws were identi¬ 
fied, leading to 56 indictments and 32 convic¬ 
tions. The authors found: 

• only a few of the many incidents investi¬ 
gated resulted in prosecution, primarily 
because the evidence available did not ap¬ 
pear to support indictment. Some prose¬ 
cutors reported that grand juries failed to 
understand the case because of the tech¬ 
nical nature of the acts involved; 

• more perpetrators now seem to be mount¬ 
ing a defense than did those prosecuted 
in the past. The most actively defended 
recent cases have been those involving 
electronic trespass; 

• many prosecutors interviewed were un¬ 
aware that their State had a computer 
crime law; 

• some prosecutors reported that because 
penalties for violation of their computer 
crime laws are less than those for tradi¬ 
tional theft and burglary laws, they favor 
use of the more stringent statutes; and 

• many prosecutors chose to use the com¬ 
puter crime law only when a traditional 
fraud, theft, or malicious mischief statute 
was clearly less applicable. Therefore, this 
report likely covers only a small propor¬ 
tion of all computer crimes because of the 
preponderance of cases prosecuted under 
other laws. The most experienced prose¬ 
cutor of computer crimes in California 
strongly supports this conclusion. 21 

SRI International has also kept a file of com¬ 
puter crime incidents, principally consisting 
of media reports. However, SRI's lead inves¬ 
tigator in this area has for some time argued 
forcefully that none of the figures quoted on 
the subject of computer crime (including 


‘“Susan Nycum (Gaston Snow & Ely Bartlett), and Dorm 
Parker (SRI International), 4 ’Prosecutorial Experience With 
State Computer Crime Laws, ” February 1985, pp. 15-16 (un¬ 
published paper). 
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SRI's) are reliable." This researcher and 
another veteran of computer crime debates 
have written: 

No valid statistics representative of the 
computer crime problem currently exist. Al¬ 
though many estimates have been published 
and often quoted, investigation has shown 
that these are not representative, primarily 
because of the following: 

Z Few victims are willing to report inci¬ 
dents and suffer the staff-time expense, 
embarrassment, civil liabilities, business 
disruption, questionable basis for litiga¬ 
tion, and violation of security by reveal¬ 
ing vulnerabilities. 

• Definitions of what constitutes a crime 
differ from state to state so that events 
cannot be consistently measured. 

. No successful collection mechanisms for 
statistics have been discovered and de¬ 
veloped. . . . 

The lack of statistics measuring the size of 
the problem has been a source of concern. Al¬ 
though news media attention on spectacular 
individual cases has created the image of a 
very serious problem, the absence of valid 
data makes establishing rational legislative 
priorities and characterizing the problem dif¬ 
ficult. 2 ' 

In contrast, another prominent computer secu¬ 
rity expert argues that it is, in fact, quite pos¬ 
sible to develop usable data on computer crime, 
although he acknowledges that "statistical 
analyses of data on computer-related crime do 
not lead to the predictability of such crime in 
any particular working environment. "2 4 0f the 
1,406 cases tracked by this author as a part 
of his role as a security consultant, he reports 
that there is an average loss of $500,000; that 
89 percent are never taken to the criminal jus¬ 
tice process; and that of the 11 percent that 


"Donn"Parker, SRI International, OTA work session, J an. 
25,1985. 

°Nycum and Parker, op. at., pp. 2-3. 

"Robert Courtney, J r., and Mary AnneTodd, "Problem 
Definition: An Essential Prerequisite to the Implementation 
of Security Measures," paper prepared for presentation to The 
Second International Congress and Exhibition on Computer Se¬ 
curity, Toronto, Sept. 10-12,1984. 


are, convictions are obtained in only 18 per¬ 
cent. 25 

The justice Department Fraud and Cor¬ 
ruption Tracking (FACT) System, begun in 
1983 primarily to track cases involving fraud 
in the Federal Government, reported 8 com¬ 
puter-related crimes out of 3,112 fraud and cor¬ 
ruption cases in 1983, and 18 out of 3,582 in 
1984. The system includes only cases prose¬ 
cuted by the FBI and those at agencies that 
Congress has mandated to be monitored under 
the FACT System. Most of the cases involved 
false data entry to get unauthorized benefits 
from unemployment or welfare programs. 26 

In short, only a few scattered pieces of in¬ 
formation are available on computer crime; 
much of the quantitative information is ana¬ 
lytically soft; and in some cases, the studies 
conflict with one another. Some of these 
studies, such as the ABA report, seem to sug¬ 
gest fairly widespread patterns of computer 
crime; some of the others indicate a significant 
amount of such criminal activity, but with the 
full extent unknown. 

It is arguable how much could reliably be 
known about the nature and scope of computer 
crime. Like many other white-collar crimes, 
companies may not want to report these inci¬ 
dents to law enforcement agencies, particular¬ 
ly in the case of large losses that may result 
in embarrassment or exposure of vulnerabil¬ 
ities. However, it is possible that more focused 
study of computer crime could improve the 
soft information now available. For example, 
one congressional witness suggested that a 
large-scale "victimization study," undertaken 
by professional criminologists, could add sub¬ 
stantially to knowledge in this area. 27 This is¬ 
sue will be discussed further at the end of this 
chapter. 


"Robert Courtney, J r„ I nterview with OTA staff, J uly 17, 
1985, Because Courtney does not divulge the details of his cases 
in order to preserve the anonymity of his clients, his data are 
not open to other expert scrutiny. 

"Glenn McLaughlin, Congressional Research Service, Li¬ 
brary of Congress, "Computer Security and Crime," Issue Brief 
IB85155, Oct. 22, 1985. 

"Sanford Sherizen, testimony to Senate Small Business 
Committee, Mar. 7, 1984. 
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Finding 2 

Despite the lack of hard information, the vul¬ 
nerabilities of organizations using computer 
systems are much greater than in the past. 
Thus a consensus has emerged that a combi¬ 
nation of Federal and State laws is appro¬ 
priate in this area. 

As discussed in chapter 4, rapidly changing 
technical and social factors have increased the 
risks and potential losses related to informa¬ 
tion systems by an order of magnitude. These 
changes include increased networking, the ad¬ 
vent of microcomputers, increased dependence 
on information systems, and increased com¬ 
puter literacy. The increasing awareness of 
these new levels of risk, and resulting consen¬ 
sus in support of Federal legislative action, can 
be seen both in the actions of Congress (pass¬ 
ing, without dissent, the Computer Fraud Act), 
in substantial testimony to Congress, and in 
the opinions of many experts and groups. 28 

This apparent consensus is a very signifi¬ 
cant change from earlier sentiment in Con¬ 
gress. I n many of the earlier hearings on com¬ 
puter crime, the view was expressed that the 
existing network of statutes covering, for ex¬ 
ample, wire and mail fraud, embezzlement, and 
privacy should be adequate to cover computer 
crime, and/or that it should primarily be un¬ 
der State jurisdiction. 29 


“‘See, for example, testimony to House Judiciary Subcom¬ 
mittee on Crime, Sept. 29, 1983, N’ov. 10, 1983, and Mar. 28, 
1984; testimony to the House Science and Technology Subcom¬ 
mittee on Transportation, Aviation, and Materials hearings on 
Computer and Communications Security and Privacy. Sept. 24, 
1984; and testimony to the Senate Governmental Affairs Sub¬ 
committee on Oversight of Government Management, “Com¬ 
puter Security in the Federal Government and the Private Sec¬ 
tor, ” Oct. 25-26, 1983. The American Bar Association and 
American Institute of Certified Public Accountants reports 
cited previously also argue forcefully for legislative action, In 
addition, the Data Processing Management Association, Video¬ 
tex Industry Association, and Information Industry Associa¬ 
tion have each drafted model computer crime bills and urged 
Federal computer crime legislation, The Computer and Busi¬ 
ness Equipment Llanufacturer’s Association supported Rep¬ 
resentative Nelson’s bill, H.R. 1092. And, a 1983 survey of 637 
members of the American Society for Industrial Security indi¬ 
cated that 93 percent of the respondents felt a need for com¬ 
puter crime legislation at the Federal level (presented in Sen¬ 
ate hearings, above, p. 1631. Also see Finding 1 and discussion 
in ch. 4. 

‘ 4 See, for example. Senate Judiciary Subcommittee on 
Criminal Justice, “Hearings on S. 240, Computer Systems Pro¬ 
tection Act of 1979, ” Sept. 23. 1982. 


While some might still debate this point, the 
Federal and State actions taken so far have, 
in essence, accepted the need for legislation, 
and set forth Federal and State roles in this 
area of crime—namely, that while State laws 
will play a primary role in most cases, Federal 
legislation will concentrate on areas of special 
Federal concern: e.g., Federal records, finan¬ 
cial information, classified information, and 
possibly interstate crimes and medical records. 

One potential problem with this de facto al¬ 
location of roles in the area of computer crime 
is that different State laws are frequently in¬ 
consistent. One legal expert has suggested 
that a body such as the National Conference 
of Commissioners on Uniform State Laws could 
focus on computer crime laws and possibly 
draft a uniform model State law. 30 

Finding 3 

Legislation needs to balance concern about 
the potential urgency of the situation with 
other factors—in particular, the responsibil¬ 
ities of vendors, owners, and users for the 
security of their systems, and the need for 
keeping computer crime sanctions reasonably 
consistent with other criminal law. 

Because the nature and value of intangible 
data are difficult to assess, and because it is 
often hard to distinguish myth from reality 
where computers are concerned, it is easy to 
overreact to stories about computer crime. 

For example, computer professionals argue 
that many computer systems are irresponsi¬ 
bly left unprotected because simple precau¬ 
tions are not taken-the computerized equiva¬ 
lent of leaving piles of money in bank windows. 
Such simple precautions include, for example, 
requiring the authority of two persons for dis¬ 
bursements, maintaining logs of system activ¬ 
ity and scanning them for unusual patterns, 
changing standard passwords that are set for 
every system when they are first turned on, 
or using "dial-back" modems that require 
users to be at their authorized terminal loca- 


" Daniel Burk, "The Philosophies of Computer Crime Legis¬ 
lation: An Editorial Collection, ” Computer Law Reporter, vol. 
3, No. 3, November 1984. 



tions. (See ch. 4 for further discussion of secu¬ 
rity measures.) Thus, some would argue that 
the urgency of the need for computer crime 
legislation is considerably less than commonly 
perceived because of these systems that are 
left irresponsibly unprotected." 

This is not to say that legislation is not 
needed. Car theft is illegal, for instance, even 
though many people leave their car doors un¬ 
locked-but it does raise the importance of 
both the Federal Government and the private 
sector pursuing computer security at the same 
time that computer crime law is being devel¬ 
oped. That is, legislation alone is not a solu¬ 
tion to computer crime. These relationships be 
tween computer security and computer crime 
highlight the need for Congress to coordinate 
its efforts in examining the two topics. 

Further, as noted earlier, the gravity of 
many of the incidents of computer hacking has 
been exaggerated. For instance, the system 
that hackers broke into at Los Alamos Nation¬ 
al Laboratory in 1984 was new and still un¬ 
dergoing testing. 32'" fact, one participant in 
OTA’S work session on information security, 
whose views are shared by many in the com¬ 
puter science research community, argued 
that we should not discourage young people 
from hacking: 

A lot of the people who are known as pretty 
good programmers started out as hackers 15 
or 20 years ago poking around in systems be 
cause that was the only option available. In 
many respects that was also the best thing 
we could do for our society, which after all 
built its mid-century experience on whole 
generations of people who learned auto me¬ 
chanics souping up their cars to violate the 
speed laws. 

This poking around used to encourage teen¬ 
agers to go into computing. And if the lure 
of a little illicit playing around in somebody 
else’s computer is doing that, the benefits for 
our society are going to far outweigh the in¬ 
convenience of having a few people who 


3 'OTA work session on information security, Jan. 25, 1985. 

3! Suzanne Smith, Los Alamos National Laboratory, Remarks 
to Air Force Federal Information Systems Risk Analysis Work¬ 
shop, Montgomery, AL, J an. 22, 1985. 


weren't careful enough and had their files 
damaged by inexperienced people playing 
around on the computers. 33 

This view is quite controversial, although 
significant as a counterpoint to other voices 
that argue for strict computer crime laws. It 
should be interpreted in the spirit in which it 
was intended—as a warning against excessive 
penalties for nonmalicious experimentation, 
not as an argument that criminals who use 
computer hacking to commit crimes should be 
sanctioned by the law. And clearly there are 
some systems in which experimentation is 
more tolerable than others—at schools of com¬ 
puter science, for example, where hacking is 
even tacitly encouraged—while there are 
others that are far more sensitive and should 
be well protected, both by law and by security 
measures. 

A second important broad concern is the 
need for keeping standards and practices for 
computer crime reasonably consistent with 
standards and practices for other kinds of 
criminal activity. For example, one scientist 
compared an employee "stealing" computer 
time to do personal work (a much discussed 
form of computer abuse in computer literature 
and congressional hearings) to a machine tool 
operator who uses the shop's equipment after 
hours for personal work. The policy for such 
activity varies among machine shops from for¬ 
bidden to encouraged, but it is generally not 
considered a criminal offense. 34 

Finally, it is worth noting that there are po¬ 
tential disadvantages to being overzealous in 
computer crime legislation. This is related to 
a question that Senator Paul Laxalt raised in 
1980 hearings: 

By focusing on the computer as an instru¬ 
mentality, are we exposing individuals to 
criminal liability for possibly innocent con¬ 
duct while not furthering the public safety? 

Previous OTA testimony also warns against 
"criminalizing bad manners": 


“ota work session, J an. 25,1985. 

The Computer F raud Act does not criminalize the unau¬ 
thorized use of computer time for personal purposes, although 
some State statutes do. 
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Not all instances of unethical behavior are 
illegal. Behavior such as eavesdropping on 
private conversations and snooping into 
private papers by individuals is not totally 
covered by law. Instead, society regulates it 
through a less formal system of social re¬ 
wards and punishments. As communications 
increasingly take electronic form and as laws 
and regulations are passed, such behavior 
may become subject to formal criminal rather 
than informal social sanction. Maybe in many 
cases it should be treated so, but we may 
need to build sufficient flexibility into the law 
to avoid criminalizing all bad manners. 35 

Overly restrictive or intimidating legislation 
could also, for example, stifle productive flows 
of information from government to the pub¬ 
lic, or stifle productive and creative activities 
on the part of computer users. Several critics 
of the Computer F raud Act have argued that 
the law could be used by agencies bent on se¬ 
crecy to prosecute employees for informally di¬ 
vulging computer-based information to the 
public or the press—even if that information 
was available to the public under the Freedom 
of Information Act. 36 

Finding 4 

A number of possible actions have been iden¬ 
tified to darif y and/or strengthen the Federal 
role in monitoring, preventing, and prosecut¬ 
ing computer crime. Congress has already 
enacted computer crime legislation, 37 but 
there are a substantial number of proposals 
before the 99th Congress to fine-tune or 
change the Computer Fraud Act in some way 
(see table 5-3). 

Congressional witnesses and others have 
raised several important doubts about the ade¬ 
quacy of the new act for effective prosecution 
of violators, based on the limited experience 
currently available. Two major problems re¬ 
ported by prosecutors are: 


“Testimony of Frederick Weingarten, Program Manager, 
Communication and Information Technologies Program, Office 
of Technology Assessment, before the House Judiciary Subcom¬ 
mittee on Courts, Civil Liberties, and the Administration of Jus¬ 
tice, “Electronic Surveillance and Civil Liberties,” Oct. 24, 1985. 

“New York 7’imes, "Computer Privacy, Not Secrecy, " Oct. 
11, 1984; and Allan Adler and J erry Berman, American Civil 
Liberties Union (ACLU) Memo on "Need to Revise Newly 
Enacted Computer Crime Statute, "January 1985. 


1. the fact that the act only provides for mis¬ 
demeanor penalties unless the information 
accessed is classified. This may not be suffi¬ 
cient incentive to proceed with a criminal 
case; and 

2 . the act's wording, which defines a crime as 
an unauthorized access that "affects" a 
government or financial institution com¬ 
puter. Some argue that "affect" is a vague 
and overly broad terms* 

The legislative debate and hearings have 
identified several actions that could strengthen 
and/or clarify the Federal role in monitoring, 
preventing, and/or prosecuting computer crime. 
These are discussed briefly below. 

Extend the Federal statute to cover in¬ 
terstate crimes affecting private sector 
computers. 

In part because of considerable variation in 
State laws governing computer crime (and be¬ 
cause a few States still do not have computer 
crime laws), a Federal statute could clarify and 
standardize policies for interstate crimes. 
However, the definition of "interstate" needs 
to be carefully examined. Several of the com¬ 
puter crime bills cover systems that "affect 
interstate or foreign commerce, "3 9 or "operate 
in, or use a facility of, interstate commerce. "4° 
This could cover a very large number of infor¬ 
mation systems and prospective crimes if Fed¬ 
eral officials chose to interpret it that way. 
Many businesses routinely exchange informa¬ 
tion between their computers located in sev¬ 
eral States; almost all systems use a telecom¬ 
munications carrier that operates across State 
lines. The Administration bill (S. 1678 in the 
99th Congress), on the other hand, covers only 
crimes in which "two or more computers are 
used which are located in different States or 
in a State and a foreign country. "TheAdmin- 


3, See table 5-2. Both the Counterfeit Access and Computer 
Fraud and Abuse Act of 1984 (Public Law 98-473) and the Small 
Business Computer Security and Education Act of 1984 (Pub¬ 
lic Law 98-362) were enacted in the 98th Congress. 

’“See May 23, 1985, hearing of the House J udiciary Com¬ 
mittee, Subcommittee on Crime, on "H. R. 1001 and H.R. 930, 
Bills relating to Computer Crime and Computer Security"; and 
Mitch Betts, "U.S. Attorneys Push To Clarify Vague ’84 DP 
Crime Law, " Computerworld, July 1. 1985. 

“H.R. 1001 in the 99th Congress, Representative Hughes. 

4 °S. 2270 in the 98th Congress, Senator Cohen. 
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i strati on wants a limited Federal role in the 
area of computer crime, in line with its under¬ 
standing of Federal/State roles. 41 

Because of the fluid nature of telecommu¬ 
nication networks, computerized information 
may cross State lines in transmission even if 
the perpetrator is in the same State as the 
host/victim computer. Thus, in general, estab¬ 
lishing the site of the computer crime, and 
hence the jurisdiction, can be difficult. Be¬ 
cause of this difficulty, OTA found that it 
would be useful to have broad wording for the 
definition of "interstate" in Federal computer 
crime cases, while at the same time providing 
a checking mechanism so that Federal juris¬ 
diction does not expand without bounds. Sev¬ 
eral bills provide for Federal jurisdiction while 
adding such a mechanism by allowing State 
jurisdiction to supersede Federal under certain 
conditions, through a careful weighing of pri¬ 
orities and Federal interest in the case. 42 
Another advantage of providing this option 
for State officials is that they can use the ex¬ 
pertise of the FBI or Secret Service if neces¬ 
sary; Federal involvement could also help to 
standardize State treatment of computer 
crime cases. To further standardize State ap¬ 
proaches to computer crimes, Congress may 
also wish to commission or participate in the 
development of a model State computer crime 
act, as discussed earlier. 43 

"Statement of J ohn C. Keeney, Deputy Assistant Attorney 
General, Criminal Division, Department of Justice, to House 
Judiciary Subcommittee on Civil and Constitutional Rights 
hearings, Aug. 9, 1984. 

“The Nelson (H.R. 930 in the 99th Congress), Trible (S. 440 
in the 99th Congress), and Cohen (S. 2270 in the 98th Congress) 
bills have this provision. They say that in cases of concurrent 
Federal and State or local jurisdiction, Federal law enforcement 
officers should consider the relative gravity of the Federal of¬ 
fense and the State or local offense; the relative interest in Fed¬ 
eral investigation or prosecution; the resources available to the 
Federal authorities and the State or local authorities; the tra¬ 
ditional role of the Federal authorities and the State or local 
authorities with respect to the offense; the interests of federal¬ 
ism; and any other relevant factor. (S. 440, Section 6b.) These 
bills also provide for periodic reports to Congress on the effect 
of the law on the scope of Federal jurisdiction. The provisions 
for balancing State and Federal interests in establishing juris¬ 
diction are already reflected to some extent in internal Depart¬ 
ment of J ustice policies. (Ed O’Connell, House Judiciary Sub¬ 
committee on Crime, personal communication, January 1986. ) 

“For good analyses of some of the differences between 
State laws in this area, see Becker, op. cit., and Nycum and 
Parker, op. cit. 


Amend the conceptual approach to defin¬ 
ing computer crime used in the Computer 

Fraud Act. 

There are at least two basic ways legislation 
could define computer crimes and address 
sanctions: 

1. laws could declare it a crime to access cer¬ 
tain kinds of information or to make un¬ 
authorized use of the machine itself essen¬ 
tially a kind of trespass; or 

2. laws could concentrate on the nature of 
the crime committed while using a com¬ 
puter, essentially a tool approach. 

The Computer Fraud Act and Representa¬ 
tive Hughes' proposed amendment in the 99th 
Congress, H.R. 1001, both take the trespass 
approach because they define crimes accord¬ 
ing to unauthorized access to particular types 
of information, or unauthorized use of com¬ 
puters (in H.R. 1001, for interstate computer 
crime). Most of the other bills take the "tool" 
approach, focusing on use of the computer to 
defraud. This approach does not require that 
prosecutors prove access was unauthorized, 
which can be difficult for insider crimes. 

An interesting variation on the "tool" ap¬ 
proach are model computer crime acts drafted 
by the Videotex Industry Association and 
Data Processing Management Association in 
1984; these model acts define different kinds 
of crimes such as "computer fraud, " "damage 
or destruction of computer property, " "com¬ 
puter trespass, " and "theft of computer prop¬ 
erty or services. "The Virginia computer crime 
act adopts this approach, defining five new 
crimes: computer fraud, computer trespass, 
computer invasion of privacy, theft of com¬ 
puter services, and personal trespass by com¬ 
puter."These categories are similar to those 

outlined earlier in table 5-1. 


“Virginia Computer Crimes Act, Virginia Code Section 

18 . 2 - 152.1 etseq., signed by the Governor Apr. 11,1984. The 
act also expands the definition of embezzlement in Virginia's 
criminal code to include embezzlement of computer time and 
services. For a discussion see Daniel Burk, 'Virginia's Response 
to Computer Abuses: An Act in Five Crimes, ” Computer Law 
Reporter, July 1984. 
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Because this kind of "tool" approach con¬ 
nects computer crimes closely to traditional 
(noncomputer) violations that the computer 
crimes resemble, it may be easier for many 
people (and perhaps prosecutors) to understand. 
However, sentiment in the 99th Congress, as 
evidenced by the proposed legislation, is either 
to retain the conceptual framework of the 
Computer Fraud Act with some additions or 
modifications, or to adopt a simplified "tool" 
approach. The Administration's bill essen¬ 
tially uses this latter approach, focusing on 
fraud or theft committed with the computer. 

Change the kinds of information covered 
in Federal legislatiom to include medical 
records, to clarify the law regarding dis¬ 
closure of public information, and/ or to 
clarify the definition of "financial insti¬ 
tution. " 

Three possible changes have been clearly iden¬ 
tified. One would extend coverage to include 
medical records. Interest in this measure was 
aroused by reports of a hacker break-in at 
Memorial Sloan-Kettering Cancer Center in 
New York in 1983. 45 However, the relative fre¬ 
quency and seriousness of threats to medical 
records have not received close study. The Ad¬ 
ministration argues that tampering with med¬ 
ical records should be considered an issue of 
State law, unless the records are those of a 
Federal agency or Federal medical facility. 46 

The second potential change in the kinds of 
information covered in the Computer Fraud 
Act is the option of restricting the kinds of in¬ 
formation covered in section 3 (Federal rec¬ 
ords). S. 610 modifies subsection a(3) of the 
Computer Fraud Act; while it is still a crime 
to modify, destroy, or use Federal information, 
the disclosure of information is outlawed only 
if the information is protected by the Privacy 
Act. As mentioned earlier, Senators Leahy, 
Mathias, Kennedy, and Baker, 47 civil liberties 


"'See Representative Wyden’s testimony to House Judici¬ 
ary Civil and Constitutional Rights Subcommittee, Aug. 9, 
1984. 

4fi John C. Keeney, Deputy Assistant Attorney General, tes¬ 
timony, Subcommittee on Civil and Constitutional Rights, Aug. 
9, 1984. 

"Congressional Record, Oct. 11, 1984, pp. S14403, S14445. 


advocates, 48 and others argued that making 
a crime of unauthorized access and disclosure 
of any Federal computerized information 
would restrict Congress and the public's ac¬ 
cess to information whose disclosure is not re¬ 
stricted if it were not in a computer. While 
Representative Hughes has asserted that this 
should not be a problem since a "whistle¬ 
blower" or other Federal employee who wanted 
to pass on information informally would have 
authorized access to the computer, conceiva¬ 
bly the agency involved could argue that the 
disclosure was a "purpose for which such au¬ 
thorization does not extend. " OTA found that 
restricting the unauthorized disclosure phras¬ 
ing in this paragraph could help clarify the 
statute, and deserves careful consideration. 

Third, the Department of J ustice' 49 has tes¬ 
tified that the definitions of financial informa¬ 
tion protected by the 1984 Computer Fraud 
Act are unwise because they restrict coverage 
to financial records as defined by the Right to 
Financial Privacy Act of 1976, or credit agen¬ 
cy records as defined in the Fair Credit Report¬ 
ing Act. Thus, in the J ustice Department in¬ 
terpretation, the act's definition excludes the 
bank's own records, as well as records on cor¬ 
porations. The Administration bill would cov¬ 
er frauds or thefts perpetrated with access to 
any financial institution computer. 50 


‘"See ACLU memo, and New York Times, op. at. 

‘"VictoriaToensing, Deputy Assistant Attorney General, 
Criminal Division, Department of J ustice, testimony before the 
HouseJ udiciary Subcommittee on Crime, Oct. 30,1985. 

S0 A related piece of legislation, the Computer Pornography 
and Child Exploitation Prevention Act of 1985 would criminal¬ 
ize use of a computer to transmit obscene, lewd, or lascivious 
writing, descriptions or pictures, or information pertaining to 
sexual exploitation of children. While preventing exploitation 
of children is clearly a desirable goal, defining obscenity by com¬ 
puter is no easier than defining it in other media, and keeping 
standards for "electronic pornography" reasonably consistent 
with other laws and social standards, such as first amendment 
rights to free expression, is difficult. A full analysis of this leg¬ 
islation is beyond the scope of this report. (See, for example, 
Mitch Betts, "Regulation of Bulletin Boards Faces Strong Op¬ 
position," Computerworld, Sept. 9, 1985; T.R .Reid, "Big 
Brother Trible Has His Eye on Your Personal Computer," The 
Washington Post/ Washington Business, Sept. 16, 1985, p. 5.1 
For arguments in favor of this legislation, see testimony pre¬ 
sented at the Oct. 1, 1985, hearing of the Senate Committee 
on the Judiciary, Subcommittee on Juvenile Justice. 
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Establish strengthened or new reporting 

systems for monitoring computer crime. 

The Department of J ustice and FBI, for ex¬ 
ample, could further expand their ability to de¬ 
velop effective statistics on computer crime, 
or could conductor sponsor further studies of 
the topic. Although there have been several 
efforts to develop information about computer 
crime, the resulting information is unsatisfac¬ 
tory from the point of view of legislators try¬ 
ing to judge the severity of a problem. There 
are two aspects to this problem—information 
about the pervasiveness of computer crime in 
society and business generally, and specific in¬ 
formation about computer crimes within the 
Federal Government. 

Based on the weaknesses of current studies 
as discussed in Finding 1, OTA found that a 
further effort to assess the nature and scope 
of computer crime in society and business gen¬ 
erally would be most worthwhile if the effort: 

• is large-scale, well-funded, and run by a 
credible and impartial organization, so 
that the results will be authoritative; 

• includes both quantitative studies of the 
scope of computer crime and qualitative 
information on the nature of the crimes, 
how they are evolving, and what influ¬ 
ences organizations in deciding whether 
to prosecute; 

• includes the expertise of professional 
criminologists who have developed rela¬ 
tively sophisticated techniques for inter¬ 
viewing victims of crime; 

• compares computer crimes to other forms 
of white-collar crime in nature, evolution, 
and prosecution aspects; 

• compares an organization's susceptibility 
to computer crime to its computer secu¬ 
rity measures; and 

• guarantees the anonymity of the victim 
organizations contacted. 

In addition to such a study of computer 
crime in general, Congress could direct further 
studies of such crime within the Federal Gov¬ 
ernment. There are several good beginnings 
toward collecting such data—e.g., the two re¬ 
ports issued by Richard Kusserow, Inspector 


General of the Department of Health and Hu¬ 
man Services; and the Fraud and Corruption 
Tracking System at the Department of J us¬ 
tice. However, only 19 percent (25 of 130) of 
agencies responding to OTA's Federal Agency 
Data Request reported that they had an estab¬ 
lished procedure for tracking and analyzing 
computer crime within their agency. Such pro¬ 
cedures could be mandated. 

Other actions that have been suggested 
include: 

-Clarifying the definition of "authoriza¬ 
tion" in the Computer Fraud Act. 

This could help make the Computer Fraud Act 
clearer since this concept underlies the whole 
statute. A definition proposed as an amend¬ 
ment to the Virginia statute (although not yet 
taken up by the legislature) could be a useful 
starting point: 

A person is "without authority” when he 
has no right or permission of the owner and 
no reasonable grounds to believe that he has 
such right or permission, or, he exceeds such 
right or permission. It shall bean affirmative 
defense to a prosecution under this act that: 

1) the person reasonably believes that the 
owner, or a person empowered by the owner, 
has given authority to that person; 2) the per¬ 
son reasonably believes that the owner, or a 
person empowered by the owner, would have 
given authority without payment of any con¬ 
sideration; or 3) the person reasonably could 
not have known that he was without author¬ 
ity. 61 

-Enacting a limited provision to protect 
competitive secrets of victim organiza¬ 
tions during prosecution, in order to en¬ 
courage prosecution of computer crime. 

Since a key reason why companies do not pros¬ 
ecute computer crimes is a concern that they 
will expose vulnerabilities or competitive se¬ 
crets during the litigation process, Congress 


"Virginia House Bill 1469, proposed on J an. 21, 1985, as an 
amendment to Virginia Code Section 18.2-152.2, The Connect¬ 
icut computer crime bill, Public Act 84-206, Section 2(b)(1), 
passed Oct. 1,1984, uses essentially thesamedefinition. 
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may wish to consider a clause that would al¬ 
low some portion of the criminal proceedings 
to be protected. Clearly, there are trade-offs 
for establishing such a provision in the law, 
and it is important to guard against infringe¬ 
ment of the right to an open trial. A clause 
that was proposed for the District of Colum¬ 
bia computer crime act could serve as a model." 

-Enacting a penalty for persons convicted 
of a computer crime that would include 
forfeiture of their interest in (i.e, confis¬ 
cation of) equipment used in the crime. 

A provision to this effect was included in the 
Administration's bill, but not in the Computer 
Fraud Act. The Administration argues that 
such a provision would be a powerful disincen¬ 
tive to hackers and an appropriate penalty for 
those who might not otherwise receive prison 
sentences or "meaningful fines." 53 Federal law 
has traditionally included only very limited 
forfeiture provisions, principally for drug and 
racketeering crimes. The effectiveness of a for¬ 
feiture provision in discouraging hacking has 
not been closely examined. One of the factors 
that would seriously hinder its effectiveness 
is that teenaged hackers frequently do not own 
the computer equipment that they use to com¬ 
mit a crime; adult hackers often use machines 
at their place of employment. 


“Daniel Burk, Cadwalader, Wickersham, and Taft, Wash¬ 
ington, DC, personal communication, March 1985. The D.C. 
Government has not yet passed a computer crime law. The pro¬ 
posed clause reads in part: “The court may, in its discretion 
and upon good cause shown, conduct all criminal proceedings 
under this article in such a way as to protect the secrecy and 
security of the computer, computer network, computer data, 
computer software involved in order to prevent possible recur¬ 
rence of the same or a similar act by another person and to pro¬ 
tect any trade secrets involved. The court’s discretion under 
this section shall be exercised in such a way as to balance (a) 
the offender’s important right to a public trial with (b) the Dis¬ 
trict of Columbia’s compelling public interests in avoiding the 
recurrence of the same or similar acts, in encouraging the prose¬ 
cution of the crimes defined under this article, in encouraging 
complete and truthful testimony so that the offender is fully 
tried with all facts brought to the attention of the trier of fact, 
and in protecting the trade secrets of the owner, if any of such 
compelling interests are in fact present in the instant case. The 
court shall conduct only so much of the proceedings in secret 
as shall be absolutely necessary to promote these compelling 
interests of the District of Columbia. ” 

Toensing, op. cit. 


-Establishing a forum to address in a 
more systematic way the connections be¬ 
tween computer crime, computer secu¬ 
rity, and Federal information policy. 

The House Subcommittee on Transportation, 
Aviation, and Materials has recommended the 
formation of a national study commission to 
address these issues. 54 Similarly, Represent¬ 
ative George Brown has, in several sessions, 
proposed the establishment of an Institute for 
Information Policy and Research to address 
national information policy issues. 55 

Such a commission or institute could help 
reinforce the connections between these topics, 
raise the visibility of a variety of information 
policy issues, and serve as an effective coor¬ 
dinator of studies, such as on the extent of 
computer crime. On the other hand, either a 
commission or an institute might delay action, 
and would incur some additional cost. How¬ 
ever, proponents argue the work of a commis¬ 
sion or institute could, in the long run, save 
far more than the direct cost. Several commis¬ 
sions have played major roles in shaping Fed¬ 
eral policy in the issues discussed in this re¬ 
port, including the Commission on Federal 
Paperwork (which issued its final report in 
1977), the panel associated with the Presiden¬ 
tial Reorganization Project (1979), and the 
Privacy Protection Study Commission (1977). 
The first two are discussed further in chap¬ 
ter 2. 

Any Federal effort should clearly draw from 
and work in concert with independent efforts 
in the private sector to examine these issues. 
For example, the American Federation of In¬ 
formation Processing Societies has formed a 
"National Information Issues Panel" to exam¬ 
ine information policy issues and provide guid¬ 
ance to government leaders. 52 


'House Science and Technology Subcommittee on Trans¬ 
portation, Aviation, and Materials Report, “Computer and Com¬ 
munications Security and Privacy, April 1984. 

“Information Science and Technology Act of 1985, H.R. 
744 in the 99th Congress. 

American Federation of Information Processing Societies, 
Inc., “AFIPS Announces Formation of Panel on National In¬ 
formation Issues, ” news release, May 1985. The panel is chaired 
by Robert Lee Chartrand of the Congressional Research Service. 
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Chapter 6 

Computer Modeling, Decision Support, 

and Government Foresight 


SUMMARY 


Advances in information technology are 
fueling a revolution in computer modeling- 
both inside and outside of government. The 
1980s have been characterized by the expan¬ 
sion of computer modeling, via low-cost micro¬ 
computers and user-friendly software, literally 
into the office of the individual scientist, engi¬ 
neer, analyst, or manager, and, simultaneously 
via supercomputers, to the new limits of mod¬ 
eling complexity demanded in the scientific, 
energy, space, climate, and defense sectors. 
The span and diversity of computer modeling 
activities in the Federtal Government have 
never been greater. About 60 percent of Fed¬ 
eral agency units responding to the OTA Fed¬ 
eral Data Request reported at least some use 
of computer modeling, with the number of ap¬ 
plications ranging up to 2,000 per agency com¬ 
ponent. 

The use of computer-based decision analytic 
techniques has also increased dramatically. 
Such techniques typically include computer 
software that can help decisionmakers or staff 
analyze a specific problem, possible decision 
options, and the likely or possible conse¬ 
quences. About 90 percent of Federal agency 
units report use of spreadsheet software, 
about one-half use quantitative decision tech¬ 
niques (e.g., linear programming), about one- 
fourth use forecasting and qualitative tech¬ 
niques (e.g., decision trees), and a handful use 
decision conferences and computer-conferencing. 

Overall, executive branch officials respond¬ 
ing to the OTA Data Request believe these 
techniques to be very useful, even essential, 
to agency decisionmaking. Flowever, few can 
document this claim, other than by citing ad 
hoc examples, because there has been little re¬ 
search on the impact of decision support tech¬ 
niques on agency decisionmaking. The limited 


research that is available, primarily academic 
research on model implementation, suggests 
that models (and, by extension, other decision 
analytic techniques) can and do have a signif¬ 
icant impact on agency decisionmaking. Mod¬ 
eling may become a significant element in the 
process of negotiation over assumptions and 
options that is an integral part of agency (and, 
in general, political) decisionmaking. However, 
models can be wrong, and models can be 
misused. 

OTA identified several possible actions that 
could help improve sharing of expertise and 
learning; facilitate public and congressional ac¬ 
cess where appropriate; enhance congressional 
and public understanding of the strengths and 
limitations, uses and abuses of modeling; and 
improve the government return on a signif¬ 
icant investment. Possible actions include: 

• establishing guidelines or standards for 
model documentation, verification, and 
validation; 

• establishing directories of major model¬ 
ing applications; 

• clarifying procedures on public and con¬ 
gressional access to modeling details; 

• conducting further research on the impact 
of computer modeling and decision sup¬ 
port on agency decisionmaking; 

• conducting basic and applied research on 
modeling and decision support method¬ 
ologies; 

• conducting further testing and develop¬ 
ment of the decision conference technique; 
and 

• bringing computer modeling and decision 
support clearly within the scope of infor¬ 
mation resources management. 

Information technology-including data col¬ 
lection, archiving, and transfer, as well as mod- 


105 
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ding techniques-also makes possible improved 
monitoring, analysis, and, to a lesser extent, 
forecasting of key national and global trends. 
Sometimes referred to collectively as foresight 
capability, this potential is being facilitated 
by advances in: 

• technical monitoring capability (e.g., 

through remote-sensing satellites, advanced 
data communication networks, and com¬ 
puterized data centers); 

• computational and analytical capability 

(e,g., through the entire range of computer 
tools, from microcomputers to supercom¬ 
puters, related software, and the proce¬ 
dures necessary for documenting and 
validating models); and 

• the scientific knowledge base in the wide 

range of disciplines that bear on foresight. 

Realization of the potential for improved 
foresight appears to require a synthesis of 
technical advances, an integration of relevant 
information, and institutional mechanisms 
that cut across agency and disciplinary lines. 
M any of the acti ons i ntended to i mprove de- 
cision support would also assist foresight, 
since foresight can be viewed as one compo¬ 
nent of decision support. For example, a well- 
developed model evaluation program built on 


the prior work of the National Bureau of 
Standards (NBS), Energy Information Admin¬ 
istration (ElA), General Accounting Office 
(GAO), OTA, and others could help improve 
the government's modeling activities across- 
the-board. 

The combining of computer modeling, elec¬ 
tronic data collection, and various decision 
analytic techniques used in a decision confer¬ 
ence format may be an effective technical 
approach to improve government foresight 
capability. This could involve a melding of 
individual techniques already in use by vari¬ 
ous government agencies, such as the White 
House National Security Council, J oint Chiefs 
of Staff, Department of Commerce's Office of 
Program Planning and Evaluation, and Na¬ 
tional Aeronautics and Space Administration 
(NASA). 

OTA identified several possible actions that 
could facilitate improved foresight in the ex¬ 
ecutive branch—ranging from bringing fore¬ 
sight into the scope of information resources 
management, planning, and innovation activ¬ 
ities, to designating a governmentwide fore¬ 
sight office, either newly established or as part 
of an existing agency. 


INTRODUCTION 


In the early stages of this assessment, OTA 
reviewed the entire range of known applica¬ 
tions of information technology in the Federal 
Government. OTA identified computer-based 
modeling and decision support as an applica¬ 
tions area about which little concrete informa¬ 
tion was available. After a thorough literature 
search and consultation with knowledgeable 
persons inside and outside of the government, 
OTA concluded that there was no current, 
reliable source of information on Federal Gov¬ 
ernment use of computer-based modeling and 
decision support. In order to develop a sound 
basis for understanding trends and issues rele¬ 
vant to computer modeling, this topic was 
included in the OTA Federal Agency Data Re¬ 
quest, which was sent to all 13 cabinet depart¬ 
ments and 20 independent agencies. 


For purposes of this study, computer mod¬ 
eling included the entire range of mathemati¬ 
cal models used to support agency activities 
and programs—from small models run on 
microcomputers in individual offices to large, 
complex models run on supercomputers. A 
model is an abstraction, analog, image, or rep¬ 
resentation of some aspect of current (or fu¬ 
ture) reality relevant, in this case, to the mis¬ 
sions and programs of Federal agencies. All 
but the very simplest mathematical models 
are now routinely programmed as sets of equa¬ 
tions and run on computers. Thus, most mod¬ 
els are computer-based models, or computer 
models for short. Computer models can be 
used for a variety of purposes—from conduct¬ 
ing scientific research in aeronautics or cli¬ 
mate, to engineering the design of a new high- 
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way bridge, to estimating future numbers of 
school-age children, to analyzing the fiscal im¬ 
pacts of alternative medicare reimbursement 
policies. Computer models can be and are used 
to support agency decisions, but have many 
other purposes as well. 

Consideration of computer-based decision 
support for this study included several types 
of analytical techniques (along with the nec¬ 
essary computer software, hardware, data 
sets, graphic displays, and the like) used to 
support or assist decisionmakers. The catego¬ 
ries of computer-assisted analytical techniques 
used in the OTA Federal Agency Data Re¬ 
quest and in this chapter are: 

• spreadsheet computer software; 

• forecasting techniques (e.g., regression 
analysis, Delphi survey); 

• quantitative decision analytic techniques 
(e.g., linear programming, queuing analysis, 
systems analysis, critical path analysis); 

• quantitative decision analytic techniques 
with judgmental input (e.g., decision 
trees, subjective probability, multi-attri¬ 
bute utility). 

• decision conference techniques (e.g., inter¬ 
active use of computer-assisted analyti¬ 
cal techniques by decisionmakers in a 
group situation); 

• electronic voting techniques (e.g., consen- 
sor, computer polling); 

• computer-conferencing for decision anal¬ 
ysis; and 

• other (e.g., expert systems). 

Most of these techniques also involve the 
use of models. For example, an analysis of the 
relationship between rainfall, temperature, 
and crop yield might use a computer-based 
multiple regression model to better under¬ 
stand the performance of different varieties of 
crops (e.g., wheat) under various climatic con¬ 
ditions, or to help an agricultural extension 
agent or Agency for International Develop¬ 
ment agricultural employee select specific va¬ 
rieties to recommend for spring planting. 

This chapter presents OTA's findings on 
key trends and issues relevant to computer 
modeling and decision support. In addition, it 


discusses the potential for improved govern¬ 
ment foresight through the use of information 
technology and decision support techniques. 
One objective of foresight is to help govern¬ 
ment decisionmakers better understand and 
consider longer term trends and implications 
when making decisions. From that perspec¬ 
tive, foresight can be properly viewed as part 
of decision support. 

Realization of the potential to improve gov¬ 
ernment foresight appears to require a synthe¬ 
sis of technical advances, an integration of 
relevant information, and institutional mech¬ 
anisms that cut across agency and disciplinary 
lines. The foresight portion of this chapter ex¬ 
tends the earlier discussion of computer mod¬ 
eling and decision support to include: 

• remote-sensing satellites for collecting 
foresight-related data; 

• model evaluation procedures for foresight- 
related computer models; 

• systems science for analysis of complex 
trends and issues relevant to foresight; 

• data integration and display techniques, 
with examples from NASA, the National 
Security Council, and thej oint Chiefs of 
Staff; 

• advanced decision support techniques 
that could be applied to foresight; and 

• institutional mechanisms, both agency- 
specific and governmentwide, that could 
help facilitate improved foresight. 

The major foresight sectors can be viewed 
as spanning the entire range of Federal Gov¬ 
ernment programs and activities, including, 
for example: energy, environment, water, cli¬ 
mate, food, population, transportation, hous¬ 
ing, education, the economy, foreign trade, and 
national security. Not all techniques are equal¬ 
ly applicable to all foresight sectors. Thus, for 
example, remote-sensing satellites are most 
applicable to the environmental and natural 
resources (e.g., including food, water, climate, 
land use) sectors of foresight. Large-scale mod¬ 
eling is most applicable to those sectors, such 
as energy and climate, where key variables and 
relationships can be quantified and where sub¬ 
stantial input data are available. On the other 
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hand, some decision analytic techniques (e.g., 
decision conferences, computer-conferencing) 
are applicable to both quantitative and quali¬ 


tative, observational and judgmental informa¬ 
tion, and thus are relevant to many, if not all, 
foresight sectors. 


KEY TRENDS 


Information Technology Fueling 
Modeling Revolution 

Several key technological developments 
have profoundly changed the conduct of ana¬ 
lytical, forecasting, and research activities 
that utilize modeling. The first is the micro¬ 
computer revolution. This study has docu¬ 
mented elsewhere the exponential increase in 
microcomputers in the Federal Government. 
From almost no microcomputers 10 years ago 
to only a few thousand 5 years ago, Federal 
agencies now have, collectively, more than 
100,000. Access to computer power truly has 
been decentralized, both in terms of actual 
desktop computer capability and the use of 
microcomputers as access points to larger 
mainframe computer resources. This phenome 
non parallels that found in the research and 
business communities outside of government. 

A second key trend is the large increase in 
user-friendly computer software, especially 
software suitable for microcomputers. This in¬ 
cludes a wide range of spreadsheet, modeling, 
and decision analytic software that permits 
many small-scale, relatively simple decision 
analytic and modeling applications. 

A third key technological trend is at the high 
end of computer power—the supercomputer. 
Supercomputers are extending the limits of 
modeling complexity, whether it be in aero¬ 
dynamics, high-energy physics, or climate. In 
the United States, supercomputers have been 
installed at, for example, the Lawrence Liver¬ 
more Laboratory (Department of Energy) for 
magnetic fusion research, and at the Ames Re¬ 
search Center (NASA) for numerical aerody¬ 
namics modeling. Both NASA and the Depart¬ 
ment of Energy (DOE) officials have stated 
that supercomputers are essential to their 
modeling activities. 1 

'See Frank R. Bailey, "NAS: Supercomputing Master Tool 
for Aeronautics, " Aerospace America, January 1985, pp. 118- 


Use of supercomputers is not limited to gov¬ 
ernment agencies. For example, with National 
Science Foundation (NSF) funding, additional 
supercomputer centers are being established 
at several universities-induding the Univer¬ 
sity of California at San Diego, Cornell Univer¬ 
sity, Princeton University, and the University 
of Illinois at Urbana-Champaign-toaugment 
universities such as Purdue and Minnesota 
that already had supercomputers. At Illinois, 
illustrative anticipated applications range 
from high energy physics (e.g., simulation of 
a particle accelerator to test theories about 
elementary particles), to chemistry (e.g„ simu¬ 
lation of molecular behavior), to civil engineer¬ 
ing (e.g., modeling of transportation systems 
in the Chicago area), to physiology and biophy¬ 
sics (e.g., modeling of electrical activity of 
nerve and muscle cells). 2 

The earliest computer modeling dates back 
to the 1950s when first-generation computers 
were used, for example, to run simple numer¬ 
ical models for weather prediction. Until around 
1970, Federal Government modeling was con¬ 
centrated in the scientific, energy, space, and 
defense sectors-sectors with the greatest 
computational needs and the resources to pay 
for the expensive but necessary computer pow¬ 
er. During the decade of the 1970s, however, 
the widespread availability of relatively cheap 
computers contributed to the expansion of 
computer modeling activities to areas such as 
air pollution, water resources, solid waste man- 


121 ; June Altman, “Cray-2 Called Super in Memory, Perform¬ 
ance, ” M anagement I nformation Systems Week, June 12, 1985, 
p. 12; Don Dagani, “Supercomputers Helping Scientists Crack 
Massive Problems Faster, ” Chemical and Engineering N 3/vs, 
Aug. 12, 1985. pp. 7-13; and James Connolly, “Cray Doubles 
Memory On X-MP Line,” Computerworld, Sept. 23, 1985, p. 4. 

-Judith Axler Turner, “Supercomputer Raises Expectations 
Among Researchers at University of Illinois, ” The Chronicle 
of Higher Education, Oct. 23, 1985, p. 24. Also see U.S. Con¬ 
gress, Office of Technology Assessment, I nformation Technol¬ 
ogy R&D: Critical Trends and I ssues, OTA-CIT-268 (Washing¬ 
ton, DC: U.S. Government Printing Office, February 1985). 
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agement, urban development, and transporta¬ 
tion. The 1980s have been characterized by the 
expansion of computer modeling, via low-cost 
microcomputers, literally into the office of the 
individual scientist, engineer, analyst, or man¬ 
ager, and, simultaneously via supercomputers, 
to the new limits of modeling complexity de¬ 
manded in, for example, the energy and cli¬ 
mate sectors. 3 The results of OTA's Federal 
Agency Data Request (presented later) indi¬ 
cate that the span and diversity of computer 
modeling activities in the Federal Government 
have, without question, never been greater. 

Weather and climate modeling is a good il¬ 
lustration of how computer modeling in gen¬ 
eral has essentially developed in parallel with 
advances in computer power. The record shows 
that the complexity of weather and climate 
models quickly expands to push the limits of 
the computational power and capacity of each 
successive generation of computer technology. 4 

Continuing Heavy Federal Use of 
Computer Modeling 

Federal agency use of computer modeling is 
substantial-almost 60 percent of 141 agency 
components responding to the OTA Data 
Request reported some use of computer mod¬ 
eling to support of agency activities and pro¬ 
grams. And this excludes use of decision ana¬ 
lytic techniques such as spreadsheet software 
discussed in the next section. (Note: The OTA 

’See Saul I. GaSS and Roger L. Sisson, A Guide to Models 
in Governmental Planning and Operations, report by Mathe¬ 
matics, Inc., prepared for U.S. Environmental Protection Agen¬ 
cy, August 1974; and OTA, Information TechnologyR&D, op. 
cit., pp. 57-61. 

•The original numerical weather forecast models were run 
on first-generation mainframe computers (e.g., IBM 701) in the 
1950s, and the original atmospheric general circulation models 
on second-generation computers (e.g., IBM 7094) in the 1960s. 
The first global coupled atmosphere-ocean model was run in 
the mid-1970s on the state-of-the-art third-generation computers 
(e.g., IBM 360-195). (U.S. National Academy of Sciences, Na¬ 
tional Research Council, U.S. Committee for the Global Atmos¬ 
pheric Research Program, Understanding Climate Change A 
Program for Action, Washington, DC, 1975, pp. 198-201.) 

Today, the most complex climate models are straining the 
capability of class VI supercomputers (e.g., Cray-1 or Cyber 205) 
and are providing the impetus for climate modelers to move 
up to even more powerful supercomputers. (National Center for 
Atmospheric Research, Annual Report Fiscal Year 1984, 
NCAR/AR-84, Boulder, CO, March 1985, p. 36.) 


Data Request was limited to the Federal ex¬ 
ecutive branch. Other OTA research reviewed 
use of computer modeling by Congress 5 and 
State legislatures.' See the discussion inch. 8.) 

For agencies that could estimate the total 
number of modeling applications, the number 
ranged up to 2,000 per agency component. 
Among the heaviest reported computer model 
users are the Economic Research Service (De¬ 
partment of Agriculture), Office of Program 
Analysis and Evaluation (Department of De¬ 
fense (DOD)), U.S. Geological Survey (Depart¬ 
ment of the Interior), Federal Highway Ad¬ 
ministration (Department of Transportation 
(DOT)), and the Nuclear Regulatory Commis¬ 
sion (NRC). 

OTA asked agency components to list the 
10 heaviest areas of modeling application. The 
results demonstrated the wide diversity in the 
purposes for which computer modeling is used 
by Federal agencies. Examples from seven se¬ 
lected agencies are shown in table 6-1. 

Although the results of the OTA Federal 
Agency Data Request are not adequate to 
make a precise estimate of the number of mod¬ 
eling applications, it is clear that the total is 
far higher than previously thought. A 1982 
GAO survey identified 357 models used in the 
agency policymaking process, based on re¬ 
sponses from 12 of the 13 cabinet departments 
and 18 independent agencies. 7 The GAO sur¬ 
vey very likely underreported the total num¬ 
ber of policy-relevant models as of that time 
(1982), and the number has probably increased 
since then. While a precise estimate is neither 
possible or necessary, the ballpark minimum 
would appear to be in the thousands for pol¬ 
icy models and tens of thousands for all types 
of computer models used by Federal agencies. 


Stephen E. Frantzich, “Congressional Applications of In¬ 
formation Technology, ” OTA contractor report prepared by 
Congressional Data Associates, February 1985. 

'Robert Miewald, Keith Mueller, and Robert Sittig, “State 
Legislature Use of Information Technology in Oversight, ” OTA 
contractor report prepared by the University of Nebraska- 
Lincoln, January 1985. 

'U.S. General Accounting Office, Survey to Identify Models 
Used by Executive Agencies in the Policymaking Process, 
GAO/ PAD-82-46, Sept. 24, 1982. 
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Table 6-1 .—Federal Agency Modeling Applications 


Economic Research Service (Department of Agriculture) 
An estimated 2,250 computer modeling applications, 
including: 

• analysis of farm program alternatives 

• analysis of world food supply, capacity, and response 

• analysis of conservation alternatives 

• trade policy analysis 

• forecasting of commodity supply and demand 

Forest Service (Department of Agriculture) 

An estimated 100 applications, including: 

• timber resource allocation model 

• integrated pest impact assessment system 

• forest growth and yield analysis 

• fire management and planning model 

• engineering design models for roads, structures, and 
buildings 

Office of Secretary of Defense (Office of Program Analysis 
and Evaluation) 

An estimated 1,250 applications, including: 

• impact of defense spending on U.S. economy 

• strategic defense initiative effectiveness studies 

• military force mobility modeling 

• impact of procurement schedule changes on acquisition 
costs 

• impact of second-source/competitive procurement on 
acquisition costs 

Joint Chiefs of Staff (Department of Defense) 

A large number of applications, including: 

• strategic nuclear war plans analysis 

• non-strategic nuclear force mix analysis 

• military force posture analysis 

• improving crisis war planning processes 

• nuclear damage assessment 

Bureau of Indian Affairs (Department of the Interior) 

An estimated 15 applications, including: 

• road and bridge design 

• forest and range fire risk analysis 

• rangeland usage and conditions analysis 

• rangeland market appraisal 

• oil and gas lease management and planning 
Office of Assistant Secretary for Program Evacuation 

(Department of Health and Human Services) 

A small number of applications, including: 

• revenue impact analyses of, for example, including so¬ 
cial security and welfare benefits in taxable income, 
providing additional tax exemptions for children in the 
first year after birth, and replacing Federal income tax 
credits for the elderly with higher deductions. 

• estimates of participation rates for Aid for Dependent 
Children (AFDC) recipients in the Food Stamp Program. 

• estimates of the Deficit Reduction Act impact on AFDC, 

Food Stamp, and Supplemental Security Income bene¬ 
ficiaries. 

Federal Emergency Management Agency 
An estimated 100 applications, including: 

• mobilization for nuclear and general war 

• earthquake damage and economic impact estimates 

• residual capacity of U.S. economy after nuclear war 

• strategic stockpile policy development 

• flood damage analysis 

SOURCE: Office of Technology Assessment Federal Agency Data Request 


The numbers could be much higher, especially 
if spreadsheet-type models are included. 

Rapidly Increasing Federal Use 
of Computer-Based Decision 
Support and Analysis 

Computer-based decision analysis, per se, 
dates back to the 1960s for its theoretical roots 
(e.g., as developed by Howard Raiffa of Har¬ 
vard University ),8 and to the 1970s for its prac¬ 
tical development and early application— 
primarily in the military and business sectors. 
Early Federal Government sponsors of re¬ 
search and development (R&D) on decision 
analysis included the Defense Advanced Re¬ 
search Projects Agency and the Office of Na¬ 
val Research. The early decision analytic tools 
were implemented with paper and pencil, slide 
rule, and/or calculator. 

Since decision analysis techniques may in¬ 
volve many options (e.g., numerical probabil¬ 
ities based on empirical evidence and/or quan¬ 
tified judgments of uncertain future events), 
the number of calculations per run can be 
large, and the typical application involves 
many runs with changing options and values. 
Thus, decision analysis is a natural match with 
electronic computer capability. Therefore, al¬ 
most all decision analytic techniques are sig¬ 
nificantly if not entirely run on computers, at 
least for the computational aspects. Many de¬ 
cision analysis software packages are now 
available off-the-shelf for use on microcom¬ 
puters, and the software and hardware, to¬ 
gether with relevant databases, are frequently 
known as decision support systems. 

The results of the OTA Federal Agency Data 
Request provided a good profile of agency use 
of decision analytic techniques-thefirst com¬ 
plete profile known to exist. The results are 
likely to understate the full extent of use, 
given the highly decentralized nature of deci- 


'Howard Raiffa, Decision Analysis(Reading, MA: Addision- 
Wesley, 1968). Also see Rex V. Brown, "A Brief Review of Ex¬ 
ecutive Agency Uses of Personalized Decision Analysis and 
Support," OTA contractor report prepared by Decision Science 
Consortium, Inc., March 1985. 



sion support. Nonetheless, the results are gen¬ 
erally consistent with the perceptions of in¬ 
formed observers, especially with respect to 
the relative differences in levels of use for the 
various techniques. 

The results are summarized in table 6-2. As 
shown, spreadsheet software is used by almost 
all (88 percent) of the agency components re¬ 
sponding, and half of the remaining agency 
components (8 out of 16) are planning to use 
spreadsheet software. Almost half (47 percent) 
of agency components report the use of quan¬ 
titative decision analytic techniques, with 
another 13 agency components planning to use 
such techniques. About one-fifth (22 percent) 
of agency components report use of quantita¬ 
tive decision analytic techniques with judg¬ 
mental input, and about one-fifteenth report 
use of decision conference techniques. Nine 
agency components report use of decision con¬ 
ferences, and another seven components indi¬ 
cate that they are planning to do so. About 
one-twentieth report use of computer-confer¬ 
encing for decision support, and two agency 
components indicate use of electronic voting 
techniques. Also, three components report 
planned use of expert systems or artificial in¬ 
telligence for decision support. 

Use of spreadsheet software is spread 
throughout all agencies, and use of quantita¬ 
tive techniques is fairly widespread in, for 


example, the Departments of Agriculture, 
Commerce, Defense, Interior, Transportation, 
Treasury, and about two-thirds (12 of 19) of 
the independent agencies surveyed. However, 
DOD is the only agency with more than half 
of agency components reporting use of quan¬ 
titative decision analytic techniques with 
qualitative input (e.g., decision trees, multi¬ 
attribute utility). Likewise, DOD is the only 
agency reporting significant use of decision 
conferences (about one-third of DOD compo¬ 
nents reporting), although there was very scat¬ 
tered, infrequent use reported in Agriculture, 
Interior, and Transportation. 

With respect to use of quantitative decision 
analytic techniques, the International Eco¬ 
nomic Policy (IEP) Group of the International 
Trade Administration (Department of Com¬ 
merce) is illustrative. This agency component 
combines the use of decision analytic tech¬ 
niques, models, and databases "to help im¬ 
prove decisionmaking" and "to enhance lEP's 
ability to provide policy makers and U.S. busi¬ 
ness with comprehensive information on trade 
and investment matters generally. " As one 
other agency example, the Drug Enforcement 
Administration (DEA) (Department of J us- 
tice) is planning to use quantitative decision 
techniques to optimize allocation of agency 
resources (agents, monies for purchase of in¬ 
formation and evidence, etc.) in terms of pro- 


Table 6-2—Federal Agency Current and Planned Use of Computer-Assisted Decision Analytic Techniques 


Technique _ 

Spreadsheet software (e.g., Lotus 1-2-3, VisiCalc). 

Quantitative decision analytic techniques (e.g., linear programming, queuing 

analysis, systems analysis, critical path analysis). 

Forecasting techniques (e.g., Delphi, regression analysis). 

Quantitative decision analytic techniques with judgmental input (e. g., decision 

trees, subjective probability, multi-attribute utility). 

Decision conference techniques (e.g., interactive use of computer assisted 

analytical techniques by decision makers in group situation). 

Computer-conferencing for decision analysis. 

Electronic voting techniques (e. g., consensor). 

Other: Expert Systems, artificial intelligence. 

a Agency com ponent s re or! ing current se 

t) Agency com P onen,s reporting planned use of techniques notcurrently used 

SOURCE Off Ice of Technology Assessment, based on results of Federal Agency Data Request 



Current 

CD 

(/> 

3 



Planned 

use" 


Yes 

No 

Total 

No. 

0/0 

No. 

% 

No. 

No. 

..121 

88.3 

16 

11.7 

137 

8 

. . 64 

47.4 

71 

52.6 

135 

9 

. 33 

24.6 

101 

75.4 

134 

13 

. . 29 

22.1 

102 

77.9 

131 

10 

. . 9 

6.8 

124 

93.2 

133 

7 

. . 6 

4.6 

124 

95.4 

130 

4 

. 2 

1.5 

132 

98.5 

134 

1 

3 
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ductivity as measured, for example, by the 
number of repeat offender arrests, volume and 
value of drug interdictions, and reductions in 
drug availability. Also, DEA plans to use 
quantitative techniques with judgmental in¬ 
put and artificial intelligence techniques for 
investigative and intelligence purposes. 

Other examples of the use of decision ana¬ 
lytic techniques, especially those combining 
quantitative and qualitative (judgmental) 
methodologies, include: 

• DOD use of multi-attribute utility anal¬ 

ysis to aid in the evaluation and acquisi¬ 
tion of major military systems such as the 
Advanced Scout Helicopter, Light Ar¬ 
mored Vehicle, Mobile Protective Weap¬ 
ons System, and Single Channel Ground 
and Airborne Radio System; 

• Defense Nuclear Agency use of multi¬ 

attribute utility and cost-effectiveness 
analysis to aid in R&D budgeting; 

• Department of the Air Force use of deci¬ 


sion analytic techniques to aid in planning 
and targeting air strikes against enemy 
air bases, and in developing command, con¬ 
trol, and communication countermeasures; 

• NRC use of decision analysis to aid in 
evaluation of proposed new regulatory re¬ 
quirements and safeguard designs; 

• DOE use of decision analysis to aid in im¬ 
plementation of the Nuclear Waste Pol¬ 
icy Act of 1982 and the siting of reposi¬ 
tories for high-level nuclear waste; 

• National Security Council use of decision 
analysis in evaluating alternative strate¬ 
gies for the Middle-Eastern region; and 

• President's Council on International Eco¬ 
nomic Policy use of decision analysis in 
evaluating alternative export control pol¬ 
icies for computer technology. 

For further discussion of these and other ap¬ 
plications, see the OTA contractor reports pre¬ 
pared by Decision Science Consortium, Inc., 
listed in appendix C. 


KEY OPPORTUNITIES FOR ACTION 


Guidelines or Standards 
for Model Evaluation 

Efforts to manage computer modeling and 
to establish some minimum level of standards 
have always lagged behind the actual level of 
applications by many years. I n the 1970s, as 
computer modeling applications proliferated 
throughout the Federal Government, the Na¬ 
tional Bureau of Standards, Energy Informa¬ 
tion Administration, and the General Account¬ 
ing Office took the lead in attempting to bring 
some coordination and coherence to civilian 
modeling activities. TheJ oint Chiefs of Staff 
(J CS) did likewise for defense modeling. 

GAO issued reports in 1976, 1978, and 1979, 
and NBS issued reports in 1979 and 1981 (with 
El A support). 9 A central theme in all of these 


“U.S. General Accounting Office, Ways To Improve Man¬ 
agement of Federally Funded Computerized Models, Aug. 23, 
1976; Models and Their Role in GAO, October 1978; Guidelines 
for Model Evaluation, January 1979; U.S. Department of Com- 


reports was the need to develop some kind of 
common framework for model evaluation or 
assessment. Many suggestions were made, 
but none were adopted on a governmentwide 
basis. A very few individual agencies, such as 
El A, eventually adopted some variant of a 
model evaluation procedure. (For further dis¬ 
cussion of EIA model documentation and eval¬ 
uation, see table 6-3 and related discussion be¬ 
low under the topic of public access to modeling 
details.) 

Given the very extensive use of computer 
modeling by Federal agencies, the level of for¬ 
mal model documentation, verification, and 
validation appears to be deficient. Clearly, 
computer models are judged to be important 
by many Federal agencies and are used for 


merce, National Bureau of Standards, Utility and Use of Large- 
Scale Mathematical Models, Saul I. Gass (cd.), May 1979; Val¬ 
idation and Assessment of Energy Models, Saul I.Gass (cd.), 
October 1981. 
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purposes ranging from research to decision 
support. However, the research on computer 
modeling makes two things abundantly clear: 
models can be wrong, and models can be mis¬ 
used. 10 For these reasons alone, minimum mod¬ 
eling guidelines or standards appear to be 
needed. In addition, such guidelines presum¬ 
ably would make it easier to strengthen the 
Federal modeling expertise, and, hopefully, 
achieve a higher return on what must be a sub¬ 
stantial Federal investment. (OTA did not de¬ 
velop data on the costs of modeling, and most 
agencies are unable to readily estimate such 
costs. ) 

As noted above, some agencies (e.g., NBS, 
El A, J CS) have made a concerted effort to de¬ 
velop and/or apply modeling guidelines. A lead 
role could be assigned to one of these agencies, 
perhaps NBS, or to one civilian and one mili¬ 
tary agency (e.g., NBS and J CS), for develop¬ 
ing and promulgating a set of modeling guide¬ 
lines. Much of the groundwork has already 
been done, and development of guidelines 
should be straightforward. u The lead agency 
would presumably involve all major modeling 
agencies in the guidelines development proc¬ 
ess. Guidelines for the major, expensive, com¬ 
plex computer models would logically be more 
complete and extensive than guidelines for 


’See, for example, Brian Wynne, “The Institutional Con¬ 
text of Science, Models, and Policy: The 11 ASA Energy Study,” 
Policy Sciences, vol. 17, No. 3. November 1984, pp. 277-320; 
W. Hafele and H.H. Rogner, “A Technical Appraisal of the 
11ASA Energy Scenarios? A Rebuttal, ” Policy Sciences, vol. 
17, No. 4. December 1984. pp. 341-365; Bill Keepin and Brian 
Wynne, "Technical Analysis of IIASA Energy Scenarios, ” N a- 
ture, vol. 312, December 1984, pp. 691-695; and David Dick¬ 
son, “Global Energy Study Under Fire, ” Science: vol. 227, Jan¬ 
uary 1985, p. 4. For a discussion of errors in forecasting models, 
see William Ascher, Forecasting: An Appraisal for Policymak¬ 
ers and Planners (Baltimore, MD: Johns Hopkins University 
Press, 1978). For discussion of limitations and risks associated 
with computer-based planning and forecasting techniques, see 
Charles Stubbart, “Why We Need a Revolution in Strategic 
Planning, ” LongRange Plarming, vol. 18, No. 6, December 1985, 
pp. 68-76; Henry Petroski, “Superbrain, Superrisk,” Across the 
Board, vol. 12, No. 12, December 1985, pp. 48-53; and Kennedy 
Maize, “How It Didn’t Turn Out: The Forecasters Who Failed 
(And One Other). ” TheEnergy Daily, vol. 14, No. 1, Jan. 2.1986. 

11 See,for example, GAO, Guidelines, op. cit.; NBS, Utility, 
op. cit.; and GAO, Validation Op. cit.; Richard Richels, "Build¬ 
ing Good Models Is Not Enough, ” / nterfaces, vol. 11, No. 4, 
August 1981, pp. 48-51; and Saul I. Gass and Lambert S. Joel. 
“Concepts of Model Confidence, ” Computers and Operations 
Research, vol. 8, No. 4,1981, pp. 341-346. 


small, simple, inexpensive, desktop models. 
Computer modeling could be brought clearly 
within the purview of the information re¬ 
sources management concept, through appro¬ 
priate amendments to the Paperwork Reduc¬ 
tion Act if necessary. 

Directory of Modeling Applications 

Prior studies of computer modeling in the 
Federal Government have generally concluded 
that directories of modeling applications 
would be helpful—at least for the major mod¬ 
els. This possibility was reiterated in a 1982 
OTA study on water resources models." Given 
the extremely large number of applications, 
a comprehensive directory would appear to be 
costly and difficult to prepare, and many of 
the applications simply may not warrant the 
effort. However, there is a stronger argument 
for a comprehensive directory of selected ma¬ 
jor models and for an index or pointer system 
to a larger number of other significant models 
and modelers, perhaps indexed by subject 
matter and type of model. These actions would 
be intended to help reduce possible excessive 
overlap and duplication, encourage exchange 
of modeling information among modelers, and 
facilitate a greater degree of public knowledge 
of and access to Federal modeling. Some ar¬ 
gue that modelers in any given area already 
know or can learn what they need to know 
about relevant modeling activities without the 
help of modeling directories. But given the 
number and diversity of modeling applica¬ 
tions, this could be difficult. 

Of 82 agency components that reported use 
of computer models, 16 or about one-fifth in¬ 
dicated the existence of a modeling directory. 
Those agencies are: 

Department of Agriculture: 

—Economic Research Service 

—Forest Service 

Department of Defense: 

-J oint Chiefs of Staff 

-Defense Contract Audit Agency 


“U.S. Congress, Office of Technology Assessment, Use Of 
Models for Water Resources Management, Planning, and Pol¬ 
icy (Washington, DC: U.S. Government Printing Office, Au¬ 
gust 1982). 
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Department of Energy: 

-Energy Information Administration 
Department of the Interior: 

-Minerals Management Service 
-U.S. Geological Survey 
-Office of Surface Mining Reclamation and En¬ 
forcement 

Department of J ustice: 

-J ustice Management Division 
Department of Labor: 

-Bureau of Labor Statistics 
Department of Transportation: 

-National Highway Traffic Safety Administra¬ 
tion (NHTSA) 

—Federal Highway Administration 
—Federal Aviation Administration 
Nuclear Regulatory Commission 
Arms Control and Disarmament Agency 
Federal Emergency Management Agency 

Most of these directories are reported to be 
in paper format, although the Forest Service 
and NHTSA indicate that their directories are 
in an on-line electronic format. Also, the EIA 
model directory is in both computerized and 
printed formats. 

In addition, some of these agency compo¬ 
nents report that they also have a central 
reference point—usually a designated person 
—with current information about modeling ap¬ 
plications. Several other agency components 
that do not have a directory do claim to have 
a contact person. Among the latter agencies 
are, for example, the Defense Advanced Re¬ 
search Projects Agency, Defense Communica¬ 
tions Agency, Department of Energy agency¬ 
wide (National Energy Software Center—a full 
clearinghouse operation, not just a person), 
Employment Standards Administration (Labor), 
Urban Mass Transit Administration (DOT), 
and Comptroller of the Current (Treasury). 

In total, a little more than one-third (31 out 
of 82) of the agency components that use com¬ 
puter modeling report having a model direc¬ 
tory and/or a designated contact person or, 
rarely, an actual clearinghouse. This one-third 
includes many of the agency components that 
appear to be among those with the heaviest 
modeling activity. These figures do not include 
model directories or clearinghouses that in¬ 
clude Federal agency models but are main¬ 
tained by non-Federal entities (e.g., universi¬ 


ties, professional associations, and private 
information companies). 

With respect to decision analytic support, 
only five agencies reported a directory or 
clearinghouse of such applications. The decen¬ 
tralized and small-scale nature of most deci¬ 
sion analytic applications probably makes a 
directory to these techniques unrealistic. 

However, for major modeling applications— 
such as the major energy, agriculture, water, 
transportation, and climate models—a direc¬ 
tory appears to make sense. Such a directory 
or family of directories should be useful to all 
parties concerned-Congress, the public, agency 
modelers, researchers, and the like. Several 
prototypes exist. The directories would logi¬ 
cally be computerized, to facilitate easy updat¬ 
ing, and could be available in on-line electronic 
format as well as in paper and microform. A 
common table of contents would be helpful, 
and would presumably be consistent with 
whatever modeling guidelines may be devel¬ 
oped. The directories could be organized by— 
at a minimum-agency, subject area, and type 
of modeling application (e.g., scientific re¬ 
search, decision support, program implemen¬ 
tation) to facilitate easy reference. 

A lead agency could be designated, perhaps 
the NBS Center for Operations Research and/ 
or the NBS Institute for Computer Science 
and Technology, to study the options and de¬ 
velop a feasible directory design. The model¬ 
ing directories and contact persons reported 
to OTA by the agencies should provide a good 
base from which to start. 


Clarified Procedures on Public Access 
to Modeling Details 

Only about one-tenth of agency components 
using computer modeling have formal proce¬ 
dures or policies (beyond the Freedom of In¬ 
formation Act) on the availability of modeling 
details (e.g., structure, assumptions, input 
data) to the public and Congress, and there is 
wide variability among the procedures and pol¬ 
icies that do exist. 
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The overall results indicate that most agen¬ 
cies have not given much attention to ques¬ 
tions of public and congressional access to 
model details. Some agencies cite the Freedom 
of Information Act as the guiding policy; 
others state that modeling details would prob¬ 
ably be provided if sought by Congress. 

The following agencies indicated the exis¬ 
tence of procedures or policies on the avail¬ 
ability of model details to the public and/or 
Congress: 

• Economic Research Service (ERS) (Agriculture) 

• Bureau of the Census (Commerce) 

• J oint Chiefs of Staff (Defense) 

• Energy Information Administration (Energy) 

• U.S. Geological Survey (Interior) 

• Bureau of Labor Statistics (BLS) (Labor) 

• Urban Mass Transportation Administration 
(Transportation) 

• Federal Aviation Administration (Transpor¬ 
tation) 

• Nuclear Regulatory Commission 

Most of the major Federal statistical agen¬ 
cies are included in the above list (e.g., ERS, 
Census, El A, BLS) because they use models 
in developing statistical trends and forecasts 
and because there is a highly visible public de¬ 
mand for their information products. Thus, 
there is a strong felt need to develop explicit 
access policies. 

However, even among the few agencies that 
have explicit policies, there is considerable 
variability in the level of public documenta¬ 
tion that is routinely made available. This does 
not appear to necessarily reflect an agency 
judgment to actively withhold certain kinds 
of modeling information, but appears to be 
more a reflection of the particular approach 
selected for model documentation. Examples 
from three agencies are presented in table 6-3. 

The El A public documentation of major 
models is one of the most extensive of all agen¬ 
cies responding to the OTA Data Request. 
This is partly attributable to the high visibil¬ 
ity of energy modeling over the last decade or 
so, periodic concerns raised about the quality 
of El A energy models and projections, and 
congressional and statutory requirements. For 


Table 6.3.—illustrative Agency Formats for 
Model Documentation 


Economic Research Service (Department of Agriculturef 

• Model name 

• Responsible person(s) 

. Model description 

• Model applications 

Z Operating and updating costs 

Joint Chiefs of Staff (Department of Defensef 

• Model title 

• Model type 

• Proponent (who maintains model) 

• Developer 

• Purpose 

• General description 

• Date implemented 

• Input 

• output 

• Model limitations 

• Hardware 

• Software 

• Time requirements 

• Security classification 

• Frequency of use 

• Users 

• Point of contact 

• Miscellaneous 

• Keyword listing 

Energy Information Administration (Department of Energyf 

• Model name 

• Acronym 

• Abstract 

• Status 

• Part of another model 

• Sponsoring agency, office, division, branch 

• Model contact 

• Documentation 

• Archive tape(s) and installation manual(s) 

• Reviews conducted (of model) 

• Purpose 

• Energy system described by model 

• Coverage (e.g., geographic, time unit/frequency) 

• Special features 

■ Modeling features 
—Model structure 
—Modeling technique 
—Model interfaces 
—Input data 
—Date sources 
—Output data 

• Computing environment 
—Language used 

—Core memory requirements 
—Estimated cost to run 
—Special features 

• Status of evaluation efforts 

• Date of last model update 

a See U.S. Department of Agriculture. Economics and Statistics Service. 
Agricultural and Other Economic Models of the Economics and Statistics Serv¬ 
ice, April 1981 According to USDA personnel, this document is still relatively 
current, and no update has been scheduled 
kjoint Chiefs of Staff, Joint Analysis Directorate, “Memorandum for Agencies 
and Organizations Involved in Wargaming and Military Simulation Model ing, ” 
re “Catalog of Wargaming and Military Simulation Models," June 1, 1984 
c us Department of Energy,Energy Information Administration, Directory ot Ener¬ 
gy Information Administration Model Abstracts, Feb. 1, 1985 
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exampl e, EIA has a statutory mandate to i n- 
sure "that adequate documentation for all sta¬ 
tistical and forecast reports prepared ... is 
made available to the public at the time of pub¬ 
lication of such reports." 13 Si nee many such 
El A reports are based on computer models, 
the models themselves are required to be doc¬ 
umented. El A has issued two orders that 
specify the format and .public availability of 
model documentation. ' n action, in part 
response to congressional criticism and out¬ 
side audits and evaluations, it appears El A 
has made significant progress in documenting 
the 33 major computer models currently in 
use, of which 24 are so-called basic models. 15 
El A has made extensive use of model evalua¬ 
tions conducted by outside groups, as well as 
internal reviews. 

The EIA and J CS model documentation il¬ 
lustrated above provide considerably more in¬ 
formation than the ERS format, since the lat¬ 
ter is really a pointer system to help interested 
parties obtain more detailed information if 
desired. However, ERS also publishes reports 
on some of the major models. For example, a 
report on the ERS "World Grain-Oilseeds- 
Livestock Model" is 64 pages long and in¬ 
cludes a narrative description, illustrations of 
model equations and linkages, and values of 
key model parameters. 16 This report is backed 
up by an even longer technical report also pre¬ 
pared by E RS staff. This suggests that, even 
if modeling information available through 
directories or other "public access" mecha- 


i‘Public Law 93-275, Section 57(B)(1) as amended by Public 
Law 94-385. 

"See Energy Information Administration Order No. 
E15910.3A, ‘'Guidelines and Procedures for Model and Anal¬ 
ysis Documentation, ” Oct. I, 1982, and Order No. E15910.4A, 
“Guidelines and Procedures for the Preparation of Model Ar¬ 
chival Packages, ” Feb. 23, 1982. 

"See Energy Information Administration, Directory of En¬ 
ergy Information Administration Model Abstracts, Feb. 1, 
1985; and Professional Audit Review Team, Performance Evalu¬ 
ation of the Energy I nformation Administration, report to the 
President and Congress, June 15, 1984, which noted significant 
progress on model documentation but with additional work still 
needed. 

“Karen Liu and Vernon O. Roninger, The World Grain-Oil- 
seeds-Livestock (GOL)Model,A Simplified Version, ERS Staff 
Report No. AGE5850128, U.S. Department of Agriculture, Eco¬ 
nomic Research Service, International Economics Division, Feb¬ 
ruary 1985. 


nisms is limited, more detailed information 
may be available through technical reports 
prepared by agency (and/or consultant) staff 
and also via articles in the published literature. 
Even the ElA's detailed public documentation 
is only an "abstract" of more extensive infor¬ 
mation available from knowledgeable EIA per¬ 
sonnel. 

As noted above, the agencies that use com¬ 
puter models to support major public informa¬ 
tion products (e.g., statistical reports on fore¬ 
casts) generally have established means to 
make modeling information available. How¬ 
ever, other agencies have not explicitly dealt 
with the access question. Some simply recite 
the Freedom of I nformation Act. Others sug¬ 
gest that information would be made available 
if requested. There may not be a real issue 
here, except to the extent that modeling and 
decision support information is considered 
classified (primarily with respect to military 
applications) or subject to executive privilege. 
Public access to models developed by govern¬ 
ment contractors can also be a problem. The 
public availability of such information appears 
to need clarification. Also, the current central 
access mechanisms (e.g., the National Tech¬ 
nical Information Service and the National 
Energy Software Center) could be reviewed for 
adequacy and possible modification. 

Further Research on the Development 
and Use of Computer Modeling and 
Decision Support 

J udging from the apparent extensive use of 
computer models and the positive tone of 
agency comments, computer models and de¬ 
cision support do have a significant impact on 
agency decisionmaking. For example, the An¬ 
titrust Division of the Department of J ustice, 
and in particular the Economic Policy Office, 
stated that: 

... [tjhe data manipulation and sophisticated 
economic and statistical analyses now used in 
connection with almost all matters could not 
be performed without computers. While it is 
impossible to estimate savings in staff time 
by using computer support, such savings are 
clearly large. 
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Nonetheless, the results of the OTA Federal 
Agency Data Request suggest that the actual 
use of models for decisionmaking has received 
little systematic study by Federal agencies. 
Very few (about 4 percent) of the agencies 
using computer models report having con¬ 
ducted or sponsored such studies. Likewise, 
about 7 percent of agencies using decision sup¬ 
port report having conducted or sponsored 
studies. 

Of the few agencies that were able to pro¬ 
vide concrete examples of studies, only the 
Federal Emergency Management Agency 
(FEMA) documented a clearly relevant study 
program (being carried out both in-house and 
with NBS assistance). It is likely that some 
study programs also exist in other agencies, 
especially in DOD components, but that the 
details or even the existence of such studies 
are unknown to headquarters personnel. The 
responses of the Army, Navy, and Air Force 
headquarters noted the decentralized nature 
of agency operations, which makes it difficult, 
absent a major data collection effort, to be 
fully knowledgeable about prior or ongoing 
studies. On the other hand, neither thej oint 
Chiefs of Staff nor the Program Analysis and 
Evaluation Office (in the Office of the Secre¬ 
tary of Defense) indicated any such studies 
even though these two components make 
heavy use of computer models. It is possible 
that such studies may be classified, although 
no i ndi cati on to thi s effect was made to OTA 
by knowledgeable DOD personnel. 

J CS staff state that no such studies are con¬ 
ducted because the substantial value of com¬ 
puter modeling is clear and undisputed and, 
in any event, evaluation studies would be dif¬ 
ficult to do, given the multiple factors that af¬ 
fect J CS decisions. Computer model results 
are just one input among many. 

On the other hand, FEMA has made a ma¬ 
jor commitment to evaluate its computer 
models, many of which are intended to sup¬ 
port planning for, and decisionmaking under, 
emergency conditions. For example, in 1982, 
FEMA prepared a 130-page report of the 
F E M A M odel i ng Task F orce that outl i ned a 
comprehensive plan for review and evaluation 


of FEMA modeling and analytical activities. 17 
In 1984, reports were issued on various FEMA 
models, including the: 

• dynamic general equilibrium model de¬ 
signed to simulate economic conditions 
before and after an emergency, including 
nuclear attack, general wartime mobiliza¬ 
tion, and other severe economic disrup¬ 
tions 18 ; and 

• damage assessment model designed to 
estimate the effects of a nuclear attack on 
various critical resources such as live¬ 
stock, crops, housing, hospitals, and phy¬ 
sicians. 19 

These and other models are then to be evalu¬ 
ated within a framework developed by the 
Center for Applied Mathematics of NBS un¬ 
der contract to FE MA. The evaluation proce¬ 
dure is intended to, among other things, test 
the extent to which a model meets user re¬ 
quirements. NBS has identified a wide range 
of analytical techniques for model evaluation, 
including: 20 

• descriptive analysis (e.g., motivation of 
model, theoretical underpinnings, model 
devel opment); 

• program verification and analysis (e.g., re¬ 
view of documentation and source code, 
model implementation); 

• data audit (e.g., review of documentation, 
analysis of computerized files); 

• sensitivity analysis (e.g., error analysis, 
statistical analysis, model stability); and 

• program usability (eg., user-model interface, 
maintenance and update procedures). 

This latest NBS effort for FEMA represents 
a continuation of and builds on earlier work 
conducted in part for El A, and could very well 
serve as a prototype for other agencies. 

Bruce J. Campbell, Task Force Chairman. ‘'FEMA Model¬ 
ing Task Force Study, ” FEMA, May 1982. 

I. Richard J. Goettle III and Edward A. Hudson, Final Re¬ 
port on the Dynamic General Equilibrium Model, prepared for 
FEMA under contract FPA 76-9, February 1984. 

‘"FEMA, Ready II Damage Estimation System Advanced 
Analytical Programs, TM-308, February 1984. 

“Robert E. Chapman, Robert G. Hendrickson, Saul I. Gass, 
and James J. Filliben, Analytical Techniques for Evaluating 
Emergency Management Models and Data Bases, prepared by 
NBS Center for Applied Mathematics under contract to FE MA, 
May 1985. 
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Beyond this, there is a considerable body of 
research and discussion in the published aca¬ 
demic and scholarly literature, 21 popular and 
trade press, 22 and various research reports, for 
example, those sponsored by NSF on the use 
of models and decision analysis in risk assess¬ 
ment. 23 Also, variants of computer modeling 

and decision analysis are being used in the de¬ 
velopment of computer-based expert systems 
and artificial intelligence. 

I n sum, however, while many agencies be¬ 
lieve in the utility of computer modeling and 
decision analytic techniques, few apparently 
think that studies are worth the time and re¬ 
sources. Nonetheless, it seems highly unlikely 
that all agencies are making the best and most 
cost-effective use of such techniques. A coordi¬ 
nated, modest research program could help il¬ 
luminate what kinds of techniques and appli¬ 
cations are working well and which are not. 
The results of such research would presuma¬ 
bly facilitate the exchange of knowledge about 
computer modeling and decision support, and 
lead to improved cost-effectiveness. The re¬ 
sults would also be helpful to the development 
of model guidelines (discussed above). 


iiFor further discussion of the history and techniques of de¬ 
cision analysis, see, for example, R.V.Brown, A.s. Kahr, and 
C. Peterson, Decision Analysis for theManager (NewYork: 
Holt, Rinehart& Winston, 1974): S. Barclay, R.V. Brown, C.W. 
Kelley,C.R. Peterson, L. D. Philips, and J . Selvidge, Handbook 
for Decision Analysis (McLean, VA: Decisions & Designs, I nc., 
September 1977); and Strategic Decision Group, The Principles 
and Applications of Decision Analysis, Ronald A. Howard and 
J.E. Matheson (eds.), 1983. Also see Rex V. Brown, "A Brief 
Review of Executive Agency Uses," op. cit.; and Rex V. Brown 
and] acob W. Ulvila, "Selected Applications of Computer-Aided 
Decision Analysis and Support," OTA contractor report pre¬ 
pared by Decision Science Consortium. I nc., May 1985, 
j2 See, for example, Michael F. Mitnone, "|ntegration of De¬ 
cision Support Systems, " Military Ra/iew, vol. 64, April 1983, 
pp. 52-59; Philip N. Sussman, “Evaluating Decision Support 
Software,” Datamation, vol. 30, Oct. 15, 1984, pp. 171-172; Ber¬ 
nard C. Reimam' and Allan D. Waren, “User-Oriented Criteria 
for the Selection of DSS So ftware, " Communications of the 
ACM, vol. 28, No.2, February 1985, pp.166-179; and Allan F. 


Ayers, “Decision Support Systems-New Tool for Manufactur¬ 
ing, Computerworld, vol 19J une 19, 1985, pp. 35-38. 
aaSee, for example,] udith D. Bentkover, et al., Benefits As¬ 


sessment: The State-of-the-Art, prepared by Arthur D. Little, 
Inc. for the National Science Foundation, December 1984; and 


Miley W. Merkhofer, et. al., Risk Assessment and Risk Assess¬ 
ment Mdhods: The State-of-the-Art, prepared by Charles River 
Associates, I nc. and Applied Decision Analysis, I nc. for the Na¬ 
tional Science Foundation, December 1984. 


I n addition to encouraging and funding re¬ 
search, other mechanisms for sharing knowl¬ 
edge could be encouraged, such as professional 
forums for model developers and users (as has 
been tried in, for example, the energy and 
water resource modeling areas), and additional 
training opportunities. 

The limited research that is available, pri¬ 
marily academic research on model implemen¬ 
tation, suggests that models (and, by exten¬ 
sion, other decision analytic techniques) can 
and do have a significant impact on agency 
decisionmaking. Models may become a signif¬ 
icant element in the process of negotiation 
over assumptions and options that is an in¬ 
tegral part of agency (and, in general, politi¬ 
cal) decisionmaking. However, models can be 
misused and abused. It may be important to 
understand the models and their roles in or¬ 
der to understand the ultimate decision. 24 

From this perspective, then, the results of 
further research may provide some new in¬ 
sights as to what kinds of questions should 
be asked and information requested in con¬ 
ducting oversight on agency decisions, and 
what kinds of techniques might be useful in 
program evaluations and audits conducted by 
GAO and others. 

GAO and agency program evaluation and 
audit offices are generally very active and 
looking for ways to improve evaluation and 
audit methodologies. Indeed, GAO is required, 
by the Congressional Budget Act of 1974, to 
monitor and recommend improvements in pro¬ 
gram and budget information for congres¬ 
sional use. GAO has, for example, identified 
needed improvements in DOD's planning, pro 

gramming, and budgeting system, in the Envi- 

2, See, t° r example, Kenneth L. Kraemer, 'The Politics of 
Model ’implementation, "Systems, Objectives, Solutions, vol. 
L1981,pp. 161-178;John Leslie King, "Successful Implemen¬ 
tation of LargeScale Decision Support Systems: Computerized 
Modelsin U.S. Economic Policy Making, "Systems, Objectives, 
Solutions, vol. 3, 1983, pp. 183-205; J ohn Leslie King, "Ideol¬ 
ogy and Use of Large-Scale Decision Support Systems in Na¬ 
tional Policymaking," Systems, Objectives, and Solutions, vol. 
4, 1984; William H. Dutton and Kenneth L. Kraemer, Model¬ 
ing as Negotiating: ThePoUticai Dynamics of Computer Models 
in the Policy Process (Norwood, NJ : Ablex, 1985); and Lance 
N. Antrim, "Computer Models as an Aid to Negotiation: The 
Experience in the Law of the Sea Conference, ” November 1984. 
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ronmental Protection Agency's cost-benefit 
analyses of environmental regulations, and in 
DOD's procedures for estimating weapons 
system costs. 25 In all these areas, decision ana¬ 
lytic techniques have a potential role, espe¬ 
cially techniques that combine quantitative 
and qualitative information, identify ranges 
of uncertainty, and specify the nature and ex¬ 
tent of subjective value judgments to the ex¬ 
tent present in the analysis. GAO and other 
audit agencies could experiment with such de¬ 
cision analytic techniques to ascertain their 
potential to improve program and budget in¬ 
formation for congressional use. 

Further Testing and Development of 
the Decision Conference Technique 

Despite the widespread and frequently so¬ 
phisticated use of computer-based decision 
support by Federal agencies, the results of this 
effort appear to be used largely by agency 
staff or, at the most, presented to agency deci¬ 
sionmakers for consideration along with other 
inputs. There appear to be relatively few sit¬ 
uations where the decisionmakers themselves 
actively participate in the decision analytic 
process. OTA located only one agency that has 
a formal program to do this-the decision con¬ 
ference facility of the Office of Program Plan¬ 
ning and Evaluation in the Department of 
Commerce (DOC). 

This DOC decision conference facility is 
used to bring key staff and decisionmakers 
together for, typically, 1 or 2 days to work 
through a real decision problem using what¬ 
ever computer and analytical tools are appro¬ 
priate. Decision conference staff do advance 
work prior to the conference and serve as facili¬ 
tators, analytical experts, and rapporteurs 
during the conference. But the primary par¬ 
ticipants arethedecisionmaker(s) and his or 


•■See U.S. General Accounting Office, Progress in Improv¬ 
ing Program and Budget Information for Congressional Use, 
GAO/ PAD-82-47, Sept. 1. 1982; GAO, The DOD Planning, Pro¬ 
gramming, and Budgeting System, GAO/OACG-84-5, Septem¬ 
ber 1983; GAO, Cost-Benefit Analysis Can Be Useful in Assess¬ 
ing Environmental Regulations, Despite Limitations, GAO- 
RCED-84-62, Apr. 6, 1984; GAO, DOD Needs To Provide More 
Credible Weapon Systems Cost Estimates to Congress, GAO/ 
NSIAD-84-70, May 24, 1984. 


her staff. The DOC decision conferences use 
a wide range of computer-assisted analytical 
techniques—including spreadsheet software, 
quantitative, and qualitative judgmental- 
depending on what is most useful. The DOC 
facility is about 1 year old. 26 A list of illustra¬ 
tive decision conferences is shown in table 6-4. 

OTA found that DOD does not appear to 
have such a facility, despite the very exten¬ 
sive DOD use of computer-based decision ana¬ 
lytic techniques. DOD does have numerous de- 


' For more detailed discussion, see Charles Treat, “Com¬ 
merce Computer Center Attracts Attention," Commerce Peo¬ 
ple, vol. 6, No. 4, April 1985, p. 5; Charles F. Treat, “Modeling 
and Decision Analysis for Management, ” a paper prepared for 
the Government Computer Expo. June 13, 1985; and William 
A. Maidens, “Better Data Doesn’t Always Mean Better Deci¬ 
sions—Decision Analysis Does, Government Executive, No¬ 
vember/December 1984, pp. 10, 14. 

Table 6-4.—illustrative Decision Conferences 
Conducted by the Office of Program Planning and 
Evaluation, U.S. Department of Commerce, 1984-85 


1. Development of Program and Budget Priorities for the U.S. 
National Marine Fisheries Service: (a) FY 1986; (b) FY 1967. 

2. Promotion of Tourism to the United States—An Assess¬ 
ment of Alternative Marketing Strategies Available to 
the Department of Commerce in Six Regional Foreign 
Markets. 

3. Review of Alternative Programs and Service Delivery 
Strategies for the Minority Business Development Agency. 

4. Allocation of Saltonstall/Kennedy Fisheries Development 
Grant Program Funds—Priority Setting for Grant Appli¬ 
cations. 

5. Assessment of Alternative Foreign Trade Strategies for 
Promoting the Export of Auto Parts to Japan. 

6. Development and Evaluation of Alternative Staffing Stan¬ 
dards for Selected, Governmentwide Administrative 
Functions (President’s Council on Management improve¬ 
ments): (a) Personnel; (b) Procurement; (c) Warehousing. 

7. Assessment of Alternative Long-Term Goals, Strategies 
and Implementation Mechanisms for the Telecommuni¬ 
cations, Computer, and Information Programs of the 
Department of Commerce. 

8. Assessment of Alternative Long-Term Strategies for 
Promoting Technological Innovation and the Transfer of 
Technology from Federal Laboratories to the Private Sec¬ 
tor (Preliminary). 

9. Assessment of Alternative Operating Objectives and 
Resource Allocations for Selected Administrative Activi¬ 
ties of the Department of Commerce: a) Personnel and 
Civil Rights Functions; b) Management and Information 
Systems Development; c) Financial Assistant Oversight 
Activities; and d) Regional Administrative Support Oper¬ 
ations. 

10. Alternative Programmatic Allocation of Field Personnel 
Resources, Center for Food Safety and Applied Nutrition 
of the U.S. Food and Drug Administration. 

SOURCE Office of Program Planning and Evaluation/Department of Commerce 
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cision analytic support centers throughout the 
various service branches and commands, but 
they are at the staff and research levels. For 
example, the J CS staff conducts extensive 
studies (inhouse and by contract) using mod¬ 
eling and decision analytic techniques. But the 
J oint Chiefs themselves do not normally par¬ 
ticipate, except to the extent of approving the 
major studies. The results of selected decision 
analytic studies are presented to the J oint 
Chiefs when relevant to a decision problem at 
hand. 

The decision conference appears to have sub¬ 
stantial potential, but the general consensus 
among practitioners is that further develop¬ 
ment and testing are needed prior to wide¬ 
spread application. Moreover, at present few 
decisionmakers are even aware of the tech¬ 
nique, and even fewer have tried it. 

One of the keys to a successful decision con¬ 
ference is the direct and full participation of 
the decisionmakers. I n order to have greater 
use of the technique, decisionmakers need both 
greater awareness and greater understanding 
of the technique. Conducting pilot tests in 
selected programmatic areas, holding a work¬ 
shop or conference, and commissioning a spe¬ 
cial report on the subject are actions that could 
help improve awareness and understanding. 

One of the areas thought to be most suited 
for the decision conference approach is R&D 
decisionmaking. The National Marine Fish¬ 
eries Service (NMFS) (DOC) has already used 
a decision conference for decisions on the R&D 
budget for fiscal years 1986 and 1987. How¬ 
ever, it should be noted that NMFS had been 
exploring decision analysis for several years, 
and thus appears to have been favorably pre¬ 
disposed. 27 Decision analytic studies also have 
been used as significant input to R&D deci¬ 
sions at DOD, although not in the decision 
conference format adopted at DOC. 28 At DOC, 

- : See Bruce Norman, "What Polio/ Analysis Can Do For 
You-A Survey, " NMFS memo to Winfred H.Meibohm, Oct. 
13, 1978; and Hoyt A. Wheeland, "NMFS Decision Analysis," 
NMFS memo to William H. Stevenson, J une 16, 1982. 

a "Foran illustration of R&D budgeting at the Defense Nu¬ 
clear Agency, see J.W. Ulvila and J.O. Chinnis, Jr., “Analysis 
for R&D Resource Management, ” Management of R&D and 
Engineering, D.F.Kocaoglu (cd.) (North-Hdland: 1985). 


decision conferences have also been conducted 
on budget, programmatic, and strategic de¬ 
cisions. 

The real power of the decision conference 
technique (or concept) is its potential to bring 
the full range of computer tools, models, ana¬ 
lytical techniques, and the like into focus for 
the decisionmaker within a framework that is 
relevant to the decisionmaker. This is a con¬ 
cept that has been visualized and partially de¬ 
veloped over the last 20 years or so by numer¬ 
ous researchers and innovators. 29 Table 6-5 
places the decision conference in the context 
of other computer-supported conference room 
concepts. However, note that different deci¬ 
sion conference configurations are possible. 
For example, DOC, in effect, uses software 
from the electronic boardroom and informa¬ 
tion center concepts in addition to the soft¬ 
ware listed under decision conference, and uses 
the orgware (i.e., organizational data and pro¬ 
cedures) from the electronic boardroom and in¬ 
formation center instead of the orgware listed 
under decision conference. 

Overall, the decision conference concept is 
quite flexible, and many of the elements of the 
various concepts shown in table 6-5 are inter¬ 
changeable. Thus it is perfectly feasible for a 
computer- or videeconferencing capability, for 
example, to be added to the decision confer¬ 
ence. Indeed, OTA's Federal Agency Data Re¬ 
quest revealed that some agencies are already 
using computer-conferencing, although not as 
part of decision conferences per se. For exam¬ 
ple, the U.S. Geological Survey (USGS) makes 
extensive use of computer-conferencing on 
such diverse topics as cartography, geoscience, 
computer hardware and software problems, 
USGS news releases, and Mount Saint Helens' 
volcanic activity bulletins. 


29 Among the many researchers, the following are illustra¬ 
tive (in alphabetical order): Rex Brown, Dennis Buede, William 
Dutton, Kenneth Kraemer, John King, Starr Roxanne Hiltz, 
Lee Merkhofer, Thomas Sheridan, and Murray Turoff. For a 
good review and extensive references, see Kenneth L. Kraemer 
and John L. King, “Computer Supported Conference Rooms: 
Final Report of a State of the Art Study, ” December 1983, pre¬ 
sented as a paper under the title “Computer-Based Systems 
for Group Decision Support” at the Academy of Management 
Annual Conference, Aug. 15, 1984. 
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Table 6-5.—Comparison of Computer-Supported Conference Room Concepts 


Electronic boardroom: 

Computer and audiovisuals 

information center: 

Computer, databases, and software tools 

Teleconferencing facility: 

Computer and communications 

Decision conference: 

Computer and models 

Element 

Electronic boardroom 

Teleconference facility 

Information center 

Decision conference 

Hardware. . . 

. Conference room; 
audiovisuals; graphic 
displays; computer 

Conference room; 
audiovisuals; audio, 
computer, or video 
telecommunication 
controller 

Conference room; large- 
screen video projector; 
computer; display terminals 

Conference room; large- 
screen video projector; 
display terminals; voting 
terminals 

Software . . . 

. Interactive graphics 

Communications 

Database management 
software; statistical 
packages; retrieval, 
graphics, and text 
processing software 

Decision analysis software; 
modeling software; voting 
tally and display software 

Orgware. . 

■ Audiovisuals; corporate 
reports; standard meeting 
protocols 

Audiovisuals; 
teleconference protocols 

Corporate and other 
databases; standard 
meeting protocols; 
standard meetings (e.g., 
annual report, market 
forecast) 

Democratic decisionmaking 
protocols (e.g., one person 
one vote; all major 
interests represented; 
majority opinion rules) 

People 

. Participants; audiovisual 
technician 

Participants (in two or 
more locations); 
teleconference facilitator 

Participants; computer 
specialists; modeling 
specialists 

Participants; decision 
analysts; group process 
facilitators 

Examples 

. Not available, Custom- 
tailored for each site 
although some “modular” 
audiovisual rooms exist 

Picturephone Meeting 
Service; Participate 

HOBO System; SYSTEM W; 
EIS, Express, XSIM 

Group Decision Aid; 

Decision Conferences of 

DDI and SUNY, Albany 


SOURCE Kenneth L. Kraemer and John L King, “Computer-Supported Conference Rooms Final Report of a State of the Art Study, ” December 1983, pp 8, 10 


Another variation on the decision conference 
concept is known as "interactive management, " 
and is intended to deal with three principal 
functions of managers: 1) intelligence (finding 
and clarifying problems), z) design (generat¬ 
ing or conceptualizing new or improved alter¬ 
native solutions), and 3) choice (selecting the 
preferred solution) .30 Like other decision con¬ 
ference concepts, the interactive management 
approach utilizes a "situation room" with 
appropriate audiovisual and computer sup¬ 
port. What distinguishes interactive manage¬ 
ment is the explicit focus on intelligence, de¬ 
sign, and choice, and the use of a specific set 
of methodologies to structure ideas, design 
alternatives, and analyze trade-offs. 31 Several 
Federal agencies have utilized the interactive 
management decision approach, including the 
Forest Service and Agricultural Research 
Service (Department of Agriculture); National 
Marine Fisheries Service (DOC); and Food and 


‘ Alexander N, Christakis and David B. Keever, “An Over¬ 
view of Interactive Management, Center for Interactive Man¬ 
agement, George Mason University, Fairfax, VA, 1984. 
ii Ibid. 


Drug Administration (Department of Health 
and Human Services) .32 

In sum, Kraemer and King's 1983 progno¬ 
sis that computer-supported conference tech¬ 
niques are "likely to grow at a slow pace over 
the next 2 years, and pickup a bit thereafter" 33 
may be coming true. It is now over 2 years 
later, and the decision conference technique 
(sometimes also known under the rubric of 
group decision support systems [GDSS] or 
strategic planning decision support systems 
[SPDSS]) is now considered to be at the cut¬ 
ting edge of computer-based decision analy¬ 
sis. 34 

,2 See CIM News, fall 1985; and Alexander N. Christakis, 
"The National Forum on Nonindustrial Private Forest Lands, ” 
Systems Research, n vol. 2, No. 3, pp. 189-199. 

"Kraemer and King, "Conference Rooms,’" op. cit., p. 7. 

3 <Atth e Novembe r 1985 meeting of ORSA/TI M, experts 
such as Warren Walker, Rand Corp.; Paul Gray, Clarement 
Graduate School; George Huber, University of Texas at Aus¬ 
tin: and Shao-ju Lee, California State University at Northridge 
agreed on the need to develop and implement a GDSS or SPDSS 
concept as the state-of-the-art in DSS. Also see Bernard C. Rei- 
mann, “Decision Support Systems: Strategic Management 
Tools for the Eighties, ” Business Horizons, September-October 
1985, pp. 71-77. Also see Fred B. Wood, “Prospects for Gen¬ 
eral Systems Decision Support Centers in the Federal Govern¬ 
ment, ” paper prepared for the Annual Meeting of the Society 
for General Systems Research, Philadelphia, PA, May 1986. 



122 


DECISION SUPPORT AND GOVERNMENT FORESIGHT 


Foresight can be properly viewed as part of 
decision support. In the context of the Fed¬ 
eral Government, foresight typically refers to 
the ability of individual Federal agencies and 
the government collectively to monitor, antici¬ 
pate, and analyze key longer term trends and 
their implications for public policy and pro¬ 
grams. One objective of foresight is to help 
government decisionmakers better understand 
and consider longer term trends and implica¬ 
tions when making decisions. 

The major foresight sectors can be viewed 
as spanning the entire range of Federal Gov¬ 
ernment programs and activities, including, 
for example: energy, environment, water, cli¬ 
mate, food, population, transportation, hous¬ 
ing, education, the economy, foreign trade, and 
national security. Not all techniques are equal¬ 
ly applicable to all foresight sectors. Thus, for 
example, remote-sensing satellites are most 
applicable to the environmental and natural 
resources (e.g., including food, water, climate, 
land use) sectors of foresight. Large-scale mod¬ 
el i ng i s most appl i cabl e to those sectors, such 
as energy and climate, where key variables and 
relationships can be quantified and where sub¬ 
stantial input data are available. On the other 
hand, some decision analytic techniques (e.g., 
the decision conferences discussed earlier) are 
applicable to both quantitative and qualita¬ 
tive, observational and judgmental informa¬ 
tion, and thus are relevant to many, if not all, 
foresight sectors. 

I nformation technology-including data col¬ 
lection, archiving, and transfer, as well as mod¬ 
eling and analytic techniques-now makes im¬ 
proved foresight possible. This potential is 
being facilitated by advances in: 

• technical monitoring capability (e.g., 
through remote-sensing satellites, advanced 
data communication networks, and com¬ 
puterized data centers); 

• computational and analytical capability 
(e.g., through the entire range of computer 
tools, from microcomputers to supercom¬ 
puters, related software, and the proce¬ 


dures necessary for documenting and val¬ 
idating models); and 

Z the scientific and technical knowledge 
base in the wide range of disciplines that 
bear on foresight. 

Realization of the potential for improved 
foresight appears to require: 1) a synthesis of 
technical advances that are here now or close 
at hand, 2) an integration of relevant informa¬ 
tion, and 3) institutional mechanisms that 
work across agency and disciplinary lines. 
Each of these is considered below. 


Technical Advances 

Relevant technical advances include micro¬ 
computers, supercomputers, remote-sensing 
systems, computerized databases, a wide range 
of software, and model evaluation procedures. 
Remote-sensing satellites and model evalua¬ 
tion are discussed here. Various applications 
of microcomputers, supercomputers, and re¬ 
lated software were discussed under decision 
support. Techniques used to integrate infor¬ 
mation are discussed in a later section. 

Remote Sensing 

The advent of remote-sensing satellites has 
revolutionized the collection of data on many 
variables relevant especially to the natural re¬ 
sources and environmental aspects of fore¬ 
sight. Satellites provide far more extensive 
Earth coverage than could possibly be achieved 
through other means, especially for oceans and 
remote land areas. In addition, these satellites 
can receive, process, and retransmit data from 
radiosondes, ships, ocean buoys, and remote 
land-based automatic stations. 

There are two basic types of environmental 
satellites: polar orbiting (or sun-synchronous) 
and geostationary (or geosynchronous). The 
polar orbiting satellites provide coverage of 
the entire Earth several times per day. The 
geostationary satellites cover only a portion 
of the Earth's surface, but coverage is contin¬ 
uous si nee the geostationary satellites main- 
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tain a constant orbital position relative to the 
Earth's surface. Illustrative kinds of data cur¬ 
rently collected by remote-sensing satellites 
include: 35 

• cloud and snow mapping; 

• volcanic eruptions and forest fires; 

• urban sprawl; 

• specific types of land cover (e.g., trees, 
crops, grassland); 

• geologic fault lines; 

• ice mapping (i.e., sea ice, mountain gla¬ 
ciers, ice sheets, ice shelves); 

• changes in margins of glaciers (e.g., re¬ 
treats and advances); 

• surface temperature and weather (land 
and sea); 

• cataclysmic weather events (e.g., hurri¬ 
canes, severe storms); 

• atmospheric and oceanic circulation pat¬ 
terns; and 

• atmospheric temperature profiles and 
water content. 

More advanced satellites are planned for the 
future, satellites that will observe all major 
aspects of the Earth system even more com¬ 
pletely. As an illustration, NASA has devel¬ 
oped the concept of the Earth-observing sys¬ 
tem, a future generation satellite that would 
build on learning from the current generation 
of operational satellites. Table 6-6 lists the 
types of parameters on which data would be 
collected and the types of applications. This 
list also represents the data needed for a 
unified approach to earth science, based, in 
NASA's words, "upon the view that the phys¬ 
ical, chemical, and biological processes at work 
on Earth comprise a coupled global system. " 36 
Many of these parameters are relevant to 
foresight. 


U.S. Department of Commerce, National Oceanic and 
Atmospheric Administration. National Environmental Satel¬ 
lite, Data, and Information Service, IVESDIS Programs: NOAA 
Satellite Operations, March 1985, pp. 16, 70; also see section 
on Landsat, pp. 206-237. 

> 6 U.S. National Aeronautics and Space Administration, God¬ 
dard Space Flight Center, Earth Observing System: Science 
and Mission Requirements Working Group Report, vol. 2, Au¬ 
gust 1984, pp. 1, 9. 


The volume of remote-sensing data relevant 
to foresight is truly staggering, especially 
when viewed on a global scale; and yet, the vol¬ 
ume of data increases substantially every year, 
reflecting the high level of observational activ¬ 
ity. The only answer to this data challenge is 
heavy use of computerized data centers and 
sophisticated data management, with data 
stored and disseminated in electronic form 
wherever possible. This is, indeed, the strat¬ 
egy followed over the last 10 years, to the 
point where the data archiving system now 
could not survive without information tech- 
nol ogy. 37 

Model Evaluation 

Another example of a key technical advance 
important to foresight is model evaluation. 
Knowledge about how to improve computer 
modeling—through appropriate documenta¬ 
tion, verification, and validation-could be 
systematically applied to at least the major 
models relevant to foresight. 

Models are, by definition, abstractions of re¬ 
ality. For very complex systems, it is unlikely 
that a perfect model can or should be devel¬ 
oped. A certain range of uncertainty is usu¬ 
ally acceptable. However, to the extent deci¬ 
sionmakers use the results of models, they 
need to have confidence in the models. Confi¬ 
dence does not mean that the results are al¬ 
ways 100 percent accurate. Confidence means 
that the decisionmaker (or other user) knows 
the strengths and limitations of the model, the 
applicability of the model for a particular de¬ 
cision, the sensitivity of the model to changes 
in key assumptions and in the model structure, 
and the range of uncertainty of model results .38 

For large, complex models, such as many of 
those used in modeling relevant to foresight 


37 For example, NOAA maintains three major computerized 
data centers that archive remote sensing (and many other kinds 
of) data: the National Climate Data Center in Asheville, NC; Na¬ 
tional Oceanographic Data Center in Washington, DC; and Na¬ 
tional Geophysical Data Center in Boulder, CO. AU provide data 
variously in paper, microfiche, microfilm, photographic, com¬ 
puter tape, computer printout, and digital data form. 

• w Sauli. Gass and Lambert S. Joel, “Concepts of Model 
Con fidence, ” Computer and Operations Research, vol. 8, No. 
4, 1981, pp. 341-346. 
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Table 6-6.—Earth-Observing Data Parameters and Applications 


Parameter 


Application 


Parameter 


Application 


Soil features: 

• Moisture 

—Surface 
—Root Zone 

• Types-areal extent (peat, 

wetlands) 

• Texture-color 

• Erosion 

• Elemental storage 
—Carbon 

—Nitrogen 

• Permafrost 

Surface temperature: 

• Land 

• Inland waters 

• Ocean 
. Ice 

Vegetation: 

• Identification 

• Areal extent 

• Condition (stress, 
morphology, phytomass) 


• Leaf area index canopy 
structure and density 

Clouds: 

• Cover 

• Top height 

• Emission temperature 

• Albedo 

• Water content 

Water vapor 
Snow: 

• A real extent 

• Thickness 

Radiation: 

• Shortwave 

• Longwave 

• Short and long wave 
Precipitation 

Evapotranspiration 

Runoff 

Wetland areal extent 

Phytoplankton: 

• Chlorophyll 

Open ocean/coastal 
Ocean/inland waters 

• Fluorescence 

Open ocean/coastal 
Ocean/inland waters 
. Pigment groups 
Open ocean/coastal 
Ocean/inland waters 

Turbidity: 

• Inland water/coastal 
ocean 


Hydrologic and geochemical 
cycles 


Geochemical cycles 
Agricultural and forestry 
Agriculture and forestry 
Geochemical cycles 
Geochemical cycles 


Geochemical 

Primary production, soil moisture 
and respiration 
Mass/energy flux 
Mass/energy flux 
Mass/energy flux 

Hydrologic cycle, biomass 
distributions and change, 
primary production, plant 
productivity, respiration, nutrient 
cycling, trace gas, source sinks, 
vegetation-climate interaction, 
microclimate 


Radiation balance, weather 
forecasting, hydrologic cycle, 
climatoiogic processes, 
tropospheric chemistry 

Weather forecasting, hydrologic 
cycle, climatoiogic processes 

Hydrologic cycle 
Water equivalent 

Surface energy budget 
Surface energy budget 
Hydrologic cycle 
Hydrologic cycle 
Climatoiogic cycle 
Hydrologic cycle 
Hydrologic cycle 
Hydrologic cycle 
Biogeochemical cycle 
Biogeochemical cycles 


Biogeochemical cycles 
erosion assessment 


Bioluminescence 

Surface elevation: 
• Land 


• Ocean 

• Inland ice 

Wave: 

. Height 

• Spectrum 
Inland ice: 

• Thickness 

• Velocity field 

. Mass balance 
temperature 

Sea Ice: 

• Areal extent 

• Concentrate ion 

• Sea ice dynamics 
Atmospheric constituents: 

(Ozone and compounds 
of carbon, nitrogen, 
hydrogen, chlorine, 
sulfur, etc.) 

Aerosols 

Temperature 


Winds 


Lightning: 

(number of flashes, 
cloud to cloud, cloud 
to ground) 

Emission features 
Electric fields 
Rock unit mineralogy 


Surface structure 
Gravity field 


Surface stress 
Oceanic geoid 
Magnetic field 


Plate motion 


Ecological processes 

Continental tectonics and surface 
processes 

Interpretation and modeling of 
gravity and magnetic field data 
Circulation 
Hydrologic cycle 

Air-sea interactions 


Ice dynamics 
Ice dynamics 

Ice dynamics, hydrologic cycle, 
climate 


Hydrologic cycle 
Oceanic processes 
Climatological processes 

Tropospheric chemistry 
Middle atmosphere 
Upper atmosphere 

Tropospheric chemistry 
Stratospheric chemistry 

Troposphere 
Middle atmosphere 
Upper atmosphere 
Troposphere 
Middle atmosphere 
Upper atmosphere 
Surface 

Tropospheric chemistry 
Atmospheric electricity 

Upper atmosphere 
Global electric circuit 

Continental rock types 
Continental soil and rock types 
and distribution 
Tectonic history 
Mantle convection, oceanic 
lithosphere, continental 
lithosphere, sedimentary basins, 
passive margins, etc. 

Weather forecasting, climate 
processes, oceanography 

Mantle convection, oceanic 
lithosphere 

Crust and upper mantle, 
composition and structure, 
lithospheric thermal structure, 
secular variation of main field 
(core problem), upper mantle 
conductivity 

Plate tectonic theory, fault motion 


SOURCE: NASA, Earth Observing System, August 1964, pp. 16-19 
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(e.g., in energy, agriculture, climate, popula¬ 
tion, and transportation), developing a high de¬ 
gree of confidence is difficult. Frequently, the 
models are too complex to depend on guess¬ 
work or back-of-the-envelope evaluations. But 
a formal evaluation or assessment program 
costs time and money, and may be seen as a 
drain on resources needed for the modeling 
activity itself. 

Nonetheless, there is now at least 10 years 
of work and research suggesting that a well- 
developed model evaluation program can help 
not only to increase decisionmaker (or user) 
confidence in the model, but also to actually 
facilitate the development of better models 
and better communication among modelers. 39 
Such a program also could help overcome 
some of the problems that confronted the 
Global 2000 study-inconsistent assumptions 
about key variables, omission of key variables, 
lack of clear model documentation, weak or in¬ 
consistent model validation, lack of analyses 
of model sensitivity to exogenous variables, 
omission of key feedback loops, and inconsist¬ 
ent input data. 40 

Because foresight by definition deals with 
the future, and because controlled global or 
hemispheric, or even national, experiments are 
rarely feasible, modeling is a critical tool of 
foresight. But even though the computer tech¬ 
nologies and databases for modeling have im¬ 
proved substantially in recent years, most op- 

"See U.S. General Accounting Office, Ways To Improve 
Management of Federally Funded Computerized Models, Aug. 
23,1976; Models and Their Rolein GAO, October 1978: Guide¬ 
lines for Model Evaluation, January 1979; U.S. Department of 
Commerce, National Bureau of Standards, Utility and Use of 
Large-Scale Mathematical) Models, Saul I. Gass (cd.). May 1979; 
Validation and Assessment of Energy Models, Saul I. Gass (cd.), 
October 1981: Also see U.S. Congress, Office of Technology 
Assessment, Use of Models for Water Resources Management, 
Planning, and Policy, OTA-O-159 (Washington, DC: U.S. Gov¬ 
ernment Printing Office, August 1982). Also see U.S. Council 
on Environmental Quality and U.S. Department of State, The 
Global 2000 Report to the President: TheTechnical Report- 
Volume T WO (Washington, DC: U.S. Government Printing Of¬ 
fice, 1980): U.S. Congress, Office of Technology Assessment, 
Global Models, World Futures, and Public Policy (Washington, 
DC: U.S. Government Printing Office, April 1982); and Donelia 
Meadows, John Richardson, and Gerhart Bruckman, Groping 
in theDark: The F i rst Decade of Global Modeling (N ew York: 
John Wiley & Sons, 1982). 

1 Global 2000, ibid., esp. ch.14. pp. 453-499. 


portunities to improve the model evaluation 
process have not as yet been realized. 

Prior research has reviewed many of the 
model evaluation frameworks proposed over 
the years. The results of a review conducted 
by Oak Ridge National Laboratory (ORNL) 
(DOE) found that evaluation elements could 
be grouped under the categories of model 
documentation, verification, validation, and 
usability. In reaching this finding, ORNL re¬ 
viewed the work of the Massachusetts I nsti- 
tute of Technology (MIT) Energy Modeling 
Laboratory, Texas Energy Advisory Council, 
GAO, Professional Audit Review Team (man¬ 
dated by Congress to review DOE'S energy 
data collection and analysis, including models), 
Dr. Saul I. Gass (frequent consultant to NBS), 
and ORNL's own evaluation technology .41 

Model evaluation is an activity that can be 
carried out by the modelers themselves, by 
model users, by model analysts or auditors, 
and/or by some combination. From the mod¬ 
eler's perspective, model evaluation is a nat¬ 
ural component of the modeling process and 
may involve spontaneous peer review or more 
organized modeling groups, meetings, and 
workshops. On a more formal basis, model 
evaluation may involve modeling standards or 
guidelines, formal user reviews or consultant 
studies, modeling laboratories, and outside au¬ 
dits. 42 An MIT approach to evaluation of en¬ 
ergy models is shown in figure 6-1, and could 
have general applicability to foresight-related 
models .43 

Aspects of the evaluation process for DOE 
energy models were discussed previously (see 
table 6-3 and related text). DOE has also 
funded an evaluation of the major climate 
models (primarily large-scale general circula¬ 
tion models run on supercomputers) used to 

<‘C. R Weisbein, R.W. Peele, and A.S. Loebl, “An Approach 
To Evaluating Energy-Economy Models, ” Energy, vol. 6, No. 
10, 1981, pp. 999-1027. 

—Martin Greenberger and Richard Richels, "Assessing 
Energy’ Policy Models: Current State and Future Direction s,” 
Annual Review of Energy, vol. 4, 1979, pp. 467-500. 

‘SeeD.T. Kresge, “An Approach to Independent Model 
Assessment, ” Validation and Assessment Issues of Energy- 
Models Workshop, National Bureau of Standards, NBS SP 569, 
1980. 



Figure 6-1 .—An Approach to Evaluating Energy (and Other) Models 



SOURCE D T. Kresge, reprinted in C R Weisbein, R.W. Peele, and A S Loebl, “An Approach To Evaluating Energy-Economy Models, 
Energy, vol. 6, No 10, 1981 
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simulate the effects of increasing atmospheric 
carbon dioxide. 

The results of this evaluation illustrate sev¬ 
eral general points that appear to be applica¬ 
ble to most or all foresight-related models: 

• there are many ways in which model re¬ 
sults can be interpreted or misinterpreted; 

• even the large, relatively well funded and 
heavily researched models are Likely to 
have significant limitations in model vari¬ 
ables, structure, and data; 

• direct comparison of model variables, 
structure, and input data can help im¬ 
prove understanding of similarities and 
differences, strengths and weaknesses of 
model results; 

• a model evaluation process can facilitate 
communication among researchers, espe¬ 
cially where the models involve several 
different disciplines (which is typically the 
case with foresight-related models); and 

• model evaluation techniques are suffi¬ 
ciently mature for application to even the 
most complex models. 

Thus, by way of illustration, Professor 
Michael E. Schlesinger of Oregon State Uni¬ 
versity, who conducted the recently completed 
DOE evaluation, found that: 

... the [climate] models might agree exten¬ 
sively in their simulated C 02 -induced climatic 
changes and yet be all wrong, and the models 
might simulate the present climate perfectly 
and yet be wrong in their simulated C0 2 -in- 
duced climatic change." 

Dr. Schlesinger concluded that, although the 
latest general circulation model results show 
considerable agreement with respect to simu¬ 
lated global mean surface temperature change, 
there are substantial disagreements as to the 
geographical distribution of these changes. 
The differences in model results and the 
known model weaknesses (including use of 
questionable assumptions about key variables) 
mean that "not all of these simulations can be 
correct, but all could be wrong. "4 5 

“Michael E. Schlesinger, Oregon State University, letter to 
Fred B. Wood of OTA, Aug. 28, 1985. 

* See Michael E. Schlesinger and John F.B. Mitchell, “Model 
Projections of Equilibrium Climatic Response to Increase C0 2 
Concentration, ” U.S. Department of Energy state-of-the-art pa- 


Comparison of the structures and assump¬ 
tions of the various climate models has shown 
some significant differences. While the major 
climate modeling centers continually work to 
improve their models, a formal program of 
model intercomparison and sensitivity studies 
is only just beginning. In 1984, an intercom¬ 
parison was conducted of the ways in which 
radiative processes are incorporated into gen¬ 
eral circulation models. 46 The participants 
reportedly found this to be a very useful activ¬ 
ity, which could be extended to other key areas 
of uncertainty, such as clouds, ocean coupling, 
sea ice, surface albedos (including snow, ice, 
land, vegetation), transient (as opposed to 
steady state) response, and atmospheric tur¬ 
bidity (e.g., from volcanic eruptions and air 
pollution) .47 

This approach appears to have potential for 
all foresight-related models, regardless of the 
focus of modeling, whether it be energy, envi¬ 
ronment, food, population, climate, or inter¬ 
national trade. A key evaluation question is 
whether there are plausible changes in model 
processes and variables and/or the addition of 
new processes and variables that could sub¬ 
stantially affect the model results, and also 
whether the range of uncertainty is small 
enough such that significant effects are highly 
probable under any plausible scenario. 

Relevant I nformation 

In addition to the technologies illustrated 
above (remote sensing and model evaluation) 
and those discussed previously, improved fore¬ 
sight requires relevant information presented 
in an integrated format. Information needs to 
be relevant and integrated in order to focus 


per, in press; also see Michael E. Schlesinger, "Atmospheric 
General Circulation Model Simulations of the Modern Antarc- 
ticClimate, Environment of West Antarctica: Potential CO 
Induced Change, Polar Research Board, National Research 
Council (Washington, DC: National Academy Press, 1984), pp. 
155-196. ' 

“See F.M. Luther, T he Intercomparison of Radiation Codes 
in Climatic Models (tCRCCM): LongwaveClear-Sky Calcula¬ 
tions, WCP-93, World Climate Programme, 1984; also see U.S. 
Department of Energy, Carbon Dioxide Information Center, 
“Radiation Codes in Climate Models-A Comparative Study, ” 
CDIC Communications, spring 1985, p. 1. 

* 7 R.E, Dickinson, “How Will Climate Change: The Climate 
System and Modelling of Future Climate, ” ch. 5, B. Bolin (cd.) 
(Chichester, West Sussex: John Wiley& Sons, Ltd., in press). 
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on those trends and relationships that are crit¬ 
ical to the major foresight sectors (e.g., food, 
water, energy, climate, housing, population, 
environment, employment, economic develop¬ 
ment, and transportation) and the important 
relationships between sectors. 

In the Federal Government, sources of rele¬ 
vant information include all cabinet depart¬ 
ments and many independent agencies. For ex¬ 
ample, the Global 2000 study was based 
largely on data and analyses from the U.S. De¬ 
partments of Agriculture; Commerce (Bureau 
of the Census, National Oceanicand Atmos¬ 
pheric Administration); Energy (E IA, Brook- 
haven National Laboratory); Interior (including 
USGS, Bureau of Mines); and State (includ¬ 
ing the Agency for International Develop¬ 
ment), the Environmental Protection Agency, 
and some outside groups (e.g„ the World Bank 
for world gross national product projections)." 
Th e Global 2000 study would not have been 
possible without the already existing activi¬ 
ties relevant to government foresight of key 
trends. Likewise, the J oint Chiefs of Staff 
global "Forecast" model (discussed later) is de¬ 
pendent on a wide range of national and inter¬ 
national data sources. 

The results of the OTA Federal Agency 
Data Request used in this study indicate that 
all cabinet level agencies and many independ¬ 
ent agencies use some computer models and 
maintain some databases that appear, at least 
on paper, to be relevant to foresight, although 
such activities are rarely, if ever, explicitly la¬ 
beled "foresight."" In addition, many agen¬ 
cies are quite active in the international arena 
with numerous bilateral agreements and trea¬ 
ties that frequently provide for the exchange 
of information—information that is likely to 
be relevant to government foresight. The sub¬ 
ject areas of such agreements and treaties 
span the spectrum from agriculture, earth 
sciences, and oceanography to forestry, water, 


'‘Global2000,Volume Two, op. cit., pp. 484-499. 

"See illustrations of computer modeling and decision sup- 

port presented earlier in this chapter; also see ch. 7 discussion 
and illustrations of agency databases. 


climatology, and environment.“There are also 
numerous nongovernmental sources" of fore¬ 
sight information. 

A major foresight challenge is sorting out 
the information most important to monitor¬ 
ing and analyzing key trends and their impli¬ 
cations. Three relatively recent developments 
have made this somewhat easier: 

1. the maturation of systems science for 
analysis of complex trends and issues rele¬ 
vant to foresight; 

2 the availability of data integration and 
graphics display equipment that can pre¬ 
sent and manipulate multiple databases 
quickly and concisely; and 

3. the maturation of analytical and decision 
support techniques that can help synthe¬ 
size both quantitative and qualitative 
information—including ranges of uncer¬ 
tainty-! nto a format that is usable by 
decisionmakers. 

Systems Science 

Numerous systems researchers-such as 
Ludwig von Bertallanfy, Karl Deutsch, Staf¬ 
ford Beer, Ervin Laszlo, Geoffrey Vickers, and 
Richard Ericson-have articulated the poten¬ 
tial of systems and cybernetics (communica¬ 
tions and control) concepts to improve the de¬ 
cisionmaking processes and "steering" 
mechanisms of government. 51 A common goal 
has been to design a system (or systems) that 
brings key information to the attention of deci¬ 
sionmakers, and helps structure and analyze 


M U.S. Department of State, "U.S. Government Participa¬ 
tion in International Treaties, Agreements, Organizations, and 
Programs in the Fields of Environment, Natural Resources, and 
Population, " an inventory prepared at the request of the Fed¬ 
eral Interagency Global Issues Work Group, J anuary 1984, pp. 
B-l to B-12 and pp. E-2 to E-6. 

“‘See, for example, Ludwig von Bertallanfy, General Sys¬ 
tems Theory: Foundations, Development, Applications (Ne/v 
York: Braziller, 1968); Karl W. Deutsch, The Nerves of Gov¬ 
ernment: Models of Political Communication and Control (New 
York: MacMillan/Free Press, 1963); Stafford Beer, Decision and 
Control: TheMeaning of Operational Research and Manage¬ 
ment Cybernetics (New York: Wiley, 1966); Ervin Laszlo, A 
Strategy for the Future (Ne/v York: Braziller); Geoffrey Vickers, 
Making Institutions Work (New York: Wiley, 1973); and Rich¬ 
ard F. Ericson, "Thinking and Management Values in the 
Microchip Era: An Action Agenda for Institutional Transfor¬ 
mation," Systems Research 2 (vol. 1), 1985, pp. 29-32. 
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that information so as to facilitate better un¬ 
derstanding of the complexities and interrela¬ 
tionships among significant variables. 

Systems science is applicable to all foresight 
sectors, and especially those that are charac¬ 
terized by complex feoibacks and interactions 
among variables or components. For example, 
i n 1982, J ames G. M i 11 er wrote that: 

Subsystems of the Earth system consist of 
sets of interacting components, each such set 
concerned with particular processes. Because 
of interactions, including feedbacks among 
subsystems, changes in one part of the sys¬ 
tem may have effects throughout the whole 
system. 52 

Indeed, research results from specific disci¬ 
plines (e.g., in such fields as geology, ocean¬ 
ography, glaciology, atmospheric sciences, and 
paleodimatology) are being published at a 
rapid rate and are shedding new light on vari¬ 
ous aspects of the Earth system. These re¬ 
search directions appear to be converging on 
the need to better monitor and understand the 
Earth as an interactive system involving the 
atmosphere, oceans, glacial and volcanic cycles, 
land mass, and biota (plants, forests, animals, 
etc. ).53 The Earth systems approach can serve 
as an important foresight methodology. 

The significance of this convergence of tech¬ 
nology (e.g., remote sensing and computers) 
with the scientific research enterprise is now 
well recognized, and cited as one of the ration¬ 
ales for such new initiatives as the Global Hab¬ 
itability Program and International Geo¬ 
sphere-Biosphere Program. 54 ! n the words of 
NASA's Dr. Burton I. Edelson, in a Science 
editorial: 55 


-James Grier Miller and Jessie L. Miller, 'The Earth asa 

System, ” Behavioral Science, October 1982, p. 310. Also see 
J.E. Lovelock, GAIA: A Ne/v Look at Life on Earth (Oxford: 
Oxford University Press, 1979). 

See, for example, Norman Myers, GAIA: An Atlas of 
Planet Management, (Garden City, NY: Anchor Books. 1984); 
Owen B. Toon and Steve Olson, "The Warm Earth, ” Science 
85, October 1985, pp. 50-57. 

■M. Mitchell Waldrop, "An Inquiry Into the State of the 
Earth: Technology Is Making It Possible To Study the Earth 
as an Integrated System; Problems Like Ozone and Acid Rain 
are Making It Imperative, ” Science, Oct. 5, 1984, pp. 33-35. 

"Burton I. Edelson, "Mission to Planet Earth" (editorial), 
Science, Jan. 25. 1985. 


Modern technology has given us the tools 
of measurement and of computation to study 
the earth as a system. We can now gain com¬ 
prehensive knowledge, not only of the state 
of the earth system and of global processes, 
but also of changes in state and processes. We 
have become uncomfortably aware that changes 
are indeed taking place, and we know that our 
own species is responsible for some of the 
changes. 

Data Integration and Display 

Fortunately, computer graphics and data 
management equipment that can integrate 
and display large amounts of data are now 
available. There are many products under de¬ 
velopment or on the market. As one example, 
NASA has developed a comprehensive data 
management and analysis system, known as 
the Pilot Climate Data System (a related ver¬ 
sion is called the Pilot Ocean Data System), 
that has broad applicability to a wide range 
of variables relevant to foresight and could 
serve as a key component of a state-of-the-art 
"global foresight data display. "“While the pi¬ 
lot system includes primarily atmospheric and 
oceanographic databases, the system concept 
could be easily extended to cover other fore- 
sight-related databases. 

The system is run on a mainframe computer 
with user-friendly, menu-driven software. The 
system has an on-line catalog of all available 
data, an on-line inventory of data sets avail¬ 
able, a data manipulation subsystem (includ¬ 
ing the capability for statistical evaluation and 
merging, averaging, etc., of data sets), and a 
state-of-the-art graphics subsystem (including 
two- and three-dimensional color). 

Another example is the Decision Informa¬ 
tion Display System (also developed with 
NASA support) that was designed to integrate 
and display selected domestic and interna¬ 
tional data, statistics, and trends in a geo¬ 
graphic format. This system has been used on 
occasion by some staff of both the Carter and 
Reagan White Houses. 57 This system also 


‘National Aeronautics and Space Administration, Pilot Ch"- 
mate Data System, undated brochure, pp. 1-8. 

57 Ronald H. Hinckley, “Information Systems for Elite De¬ 
cision-making: The White House, ” paper presented at the 1985 

(continued on next page) 
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could be extended to include a broad range of 
foresight-related data, statistics, and trends. 

A further illustration is the Crisis Manage¬ 
ment Center (CMC) operated by the White 
House National Security Council. CMC includes 
a conference room with state-of-the-art audio¬ 
visual and graphics technology, multidimen¬ 
sional charts, and the capability to quickly 
convert textual material into statistical tables 
and graphics. 58 Robert C. McFarlane, former 
National Security Advisor to the President, 
described CMC as providing staff support for 
crisis decisionmaking: 

The center conducts pre-crisis collection and 
analysis of information about likely areas in 
an effort to anticipate events and to provide 
extensive background to decisionmakers as a 
crisis preventive. The center also provides 
analytical capabilities that can be drawn upon 
during a crisis. ..59 

A final example is the "Forecasts" global 
model developed for theJ oint Chiefs of Staff 
in DOD. "Forecasts" is basically an outgrowth 
of previous global modeling efforts, especially 
the World Integrated Model and Global Macro- 
Dynamic Model, and was recently updated at 
a cost of about $1.2 million. The model inte¬ 
grates trend data in key areas, such as agri¬ 
culture (e.g., yield, land under cultivation, ex¬ 
ports, imports for various crops), soils (arable, 
non-arable), water resources (surface, ground), 
energy sources (e.g., fossil fuel, hydro, wood), 
population, transportation, and the domestic 
economy. The model includes the following 
major sectors and categories: 60 

(continusd from pra/ious page) 

Annual Meeting of the American Political Science Association, 
New Orleans, pp. 7, 9; also see Edward K. Zimmerman, “The 
Evolution of the Domestic Information Display System: To¬ 
ward a Government Public Information Network, ” Review of 
Public Data Use, June 1980, pp. 69-81; and Richard S. Beal, 
“The Transformation to Informatics, ” a plenary address 
presented at the May 1981 National Computer Conference, 
Chicago. 

“Hinckley, “Information Systems, ” op. cit., p. 12. 

“Ibid., pp, 1 1-12; also see Robert C. McFarlane, Richard 
Saunders, and Thomas C. Shun, “The National Security Council: 
Organization for Policy Making, ” The Presidency and National 
Security Policy, Gordon R. Hoxie (ed.KNew York: Center for 
the Study of the Presidency, 1984), pp. 261-273. 

6 o See U.S. Department of Defense, Joint Chiefs of Staff, 
“Forecasts Overview, ” undated; and Patricia G. Strauch, “The 
FORECASTS System-U.S. Global Model, ” Futures, October 
1984, pp. 564-566. 


• geographic characteristics (e.g„ land area, 
access to sea, and infrastructure such as 
roads, rail lines, airports, and waterways); 

• natural resources (e.g., strategic non-fuel, 
fuel minerals, other energy sources, soils, 
and water resources); 

• human resources (e.g., population by sex 
and urban v. rural birth, death, and growth 
rates, literacy, and median income); 

• human resources (e.g., population by sex 
and urban v. rural, birth, death, and growth 
rates, literacy, and median income); 

• human services (e.g., health, medical care, 
nutrition, housing, education, and social 
programs); 

• industrial (e.g., agriculture, including 
grains, non-grains, industrial crops, live¬ 
stock, and fish; manufacturing, including 
durable and non-durable goods, electric 
power, communication, and construction); 

• economic variables (e.g., gross national 
product, balance of payments, and allo¬ 
cation of government expenditures); 

• political attributes (e.g., type of govern¬ 
ment, philosophy, stability, and political 
parties); and 

The data are aggregated by country and re¬ 
gion, and the model is capable of monitoring 
key trends and forecasting these trends based 
on trend extrapolation and relatively simple 
relationships between variables. The model 
does not include all important variables and 
does not incorporate many important dynam¬ 
ics. For example, the model excludes most cli¬ 
matic trends (the exceptions being mean an¬ 
nual temperature and precipitation) and 
climate dynamics. “Thus, the model is quite 
limited in its ability to relate climatic changes 
and trends to, for example, trends in energy 
consumption, arable land acreage, global food 
markets, and the incidence of famine. Nonethe¬ 
less, "Forecasts" is one of the most complete 
(and probably among the most heavily funded) 
approaches to integrating foresight informa¬ 
tion in the Federal Government. 

All of these approaches could have a useful 
role in government foresight across the board, 
not just in NASA research laboratories, the 


Joint Chiefs of Staff, “Forecasts,”’ op. cit. 
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White House, or J oint Chiefs of Staff. How¬ 
ever, these approaches still fall short of the 
fully integrative capability needed in foresight 
and, more generally, high-level decisionmak¬ 
ing, of which foresight is a key component. 

Advanced Decision Support Techniques 

Electronic databases, computer models, and 
the like are helpful and necessary, but not 
sufficient by themselves for high-level decision 
support and foresight. The central functions 
of foresight (and decision support generally) 
are to: 

1. help decisionmakers integrate informa¬ 
tion relevant to decisions at hand; 

2. broaden the perspective and improve the 
understanding of decisionmakers vis-a-vis 
the direct and indirect factors that may 
affect or be affected by a decision; and 

3. alert decisionmakers to the strengths, 
weaknesses, risks, and uncertainties in 
the information and analyses relevant to 
a particular problem or decision area. 62 

This is obviously a difficult challenge, and 
one that, in the opinion of many who have 
served or conducted research in top-level gov¬ 
ernment policy offices, has not received ade¬ 
quate attention, For example, Dr. Ronald 
Hinckley, a political scientist who has served 
on the National Security Council Staff, has 
concluded that: 63 

The decisionmaking process in the White 
House is driven by an incomplete information 
support system. There is an abundance of in¬ 
formation transfer (communications) technol¬ 
ogy, a heavy emphasis on information man¬ 
agement (office automation) technology, but 
insufficient information integration (synthe¬ 
sis and conceptualization) technology. . . The 
dilemma is that while the President simply 
cannot have enough information, he and his 
top advisors often get too much of it because 
of lack of integration. 


"See, for example, Lindsey Grant, Thinking Ahead: Fore¬ 
sight in the Political Process (Washington, DC: The Environ¬ 
mental Fund, 1983); and Joseph F. Coates, “Foresight in Fed¬ 
eral Government Policymaking, Futures Research Quarterly, 
summer 1985, pp. 29-53. 

Hinckley, " Information Systems, ” op. cit., p. 7. 


Another White House staffer has described 
the information integration problem in these 
terms: 64 

We spend billions and billions of dollars to 
collect information to get it from the field to 
an analyst in the bowels of the bureaucracy., . 
But having spent a lot of money to sustain an 
information collection, dissemination, and 
analysis process, we spend virtually nothing 
on direct support to a senior-level policy mak¬ 
er... We have very few analytic tools for the 
very high-level people. 

In the view of Dr. Hinckley: 

... [t]he answer is probably not significantly 
more computing power; we basically have 
enough to bring our knowledge base up to par 
with the technological base. 65 

Part of the answer to improving foresight 
and decisionmaking may be the decision con¬ 
ference concept. Of all the decision analytic 
techniques reviewed earlier in this chapter, the 
decision conference concept stands out be¬ 
cause of its potential to integrate data, infor¬ 
mation, and analyses relevant to a specific de¬ 
cision or problem in a context that is relevant 
to the decisionmaker(s) and with the full par¬ 
ticipation of both the decisionmaker(s) and 
staff (experts, analysts, etc.). In contrast, most 
decision analytic techniques and computer 
models are used by individual or groups of 
analysts, researchers, and scientists, and usu¬ 
ally only the results, if anything, ever reach 
the decisionmaker. Even then, results typically 
must permeate several institutional layers. The 
decisionmakers are not actively engaged in the 
use of decision analytic tools and models. 

The decision conference technique is intended 
to help the decisionmaker make better, more 
informed decisions and to make those deci¬ 
sions with better foresight. As discussed pre¬ 
viously, DOC is the only Federal agency known 
to have a decision conference facility. The di¬ 
rector of that facility reports favorable results 
from the relatively few decision conferences 
conducted to date, but no formal evaluations 


"Richard S. Beal, National Security Council official, quoted 
in Hinckley, ibid., p. 6. 

"Ibid., p. 15. 
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have been conducted. The basic idea is to help 
the decisionmaker and his or her staff work 
through a decision problem in a reasonably 
structured way so that options and implica¬ 
tions can be clearly identified and evaluated 
using the best available information. The in¬ 
formation can be drawn from a wide variety 
of sources—prior studies, results of computer 
modeling, expert opinion, decisionmaker opin¬ 
ion, key trends, and the like. Decision analytic 
and presentational tools (e.g., computer soft¬ 
ware and graphics) can be applied on the spot, 
for example, to help structure and evaluate op¬ 
tions. 66 A few Federal agencies have also tried 
the decision conference approach known as 
"interactive management. " The director of the 
Center for Interactive Management at George 
Mason University also reports favorable re¬ 
suits. 67 

Possible limitations on the decision confer¬ 
ence techniques include the usual requirement 
that the decisionmakers participate in the en¬ 
tire decision conference-frequently lasting up 
to 2 days or more, a major time commitment 
for most decisionmakers. But perhaps the ma¬ 
jor limitations are lack of: 1) understanding 
of the technique; 2) recognition and acceptance 
of a need for the technique (or perhaps any 
so-called decision aids); and 3) desire to make 
decisions in a relatively visible, participative 
way. Some of these limitations can probably 
be overcome through education and training 
and the cumulative results of successful deci¬ 
sion conferences. 

I n any event, the technique seems worthy 
of experimentation and relevant to foresight 
—given the inherently complex, multivariate, 
and uncertain trends and issues that foresight 
must address. An important point is that pol¬ 
icymakers usually do not need, nor do they ex¬ 
pect, perfect information. Waiting for perfect 
information very often means waiting until it 
is too late to make a decision, or too late to 

“See Charles Treat, "Commerce Computer Center Attracts 

Attention, " Commerce People, vol. 6, No. 4, April 1985, p. 5; 
ChariesF.Treat, "Modeling and Decision Analysis for Man¬ 
agement, a paper prepared for the Government Computer 
Expo,J unel3,1985. 

“Thecurrent director of the Center for I nteractive Manage¬ 
ment at George Mason University is Alexander N. Christakis. 


do anything about the problem even if a deci¬ 
sion is made. For example, in the case of cli¬ 
mate, some researchers believe that ocean 
thermal lag is masking the effects of increas¬ 
ing atmospheric carbon dioxide so that by the 
time a clear signal is detected, further and pos¬ 
sibly substantial climatic change will be inevi¬ 
table. Of course, other researchers believe that 
scientific uncertainty over the climatic effects 
of rising carbon dioxide levels is such that no 
clear conclusions can yet be drawn. 68 

One or several decision conferences could be 
held on a pilot basis—with the participation 
of scientists, policy analysts, and interested 
decisionmakers-to test the technique in se¬ 
lected foresight sectors, such as energy, agri¬ 
culture, and climate. The pilot tests could fo¬ 
cus on, for example, whether uncertainties and 
sensitivities in key trends and forecasts are 
low enough to warrant serious consideration 
of specific policy options; what the range and 
magnitude of effects of the options might be; 
and whether, and in what areas, additional re¬ 
search needs to be conducted. The decision 
conference(s) could explicitly test the sensitiv¬ 
ities of policy options and effects to a wide 
range of trends and forecasts, including not 
only those generated by major modeling and 
research centers, but also those from smaller 


“For discussion of ocean thermal lag, seej ames E. Hansen, 
et. al., "Climate Sensitivity: Analysis of Feedback Mecha¬ 
nisms, " Climate Processes and Climate Sensitivity, J.E. Han¬ 
sen andT. Takahasbi (eds. ) (Washington, DC: American Geo¬ 
physical Union, 1984), pp. 130-163, esp. p. 33; and Michael E. 
Schlesinger, W. Lawrence Gates, and Young-J uneHan, The 
Role of the Ocean in C0 2 -Induced ClimateChange Preliminary 
Results From theOSU Coupled Atmosphere-Ocean General Cir¬ 
culation Model, report No. 60, Climatic Research Institute, Ore¬ 
gon State University, J anuary 1985, pp. 31-34 published in 
J.C.J.Nihoul (cd.), Coupled Ocean-Atmosphere Models (Am- 
sterdam: Elsevier, 1985). For discussion of other scientific views 
and uncertainties, see, for example, Richard C.J. Somerville and 
Lorraine A. Reimer, “Cloud Optical Thickness Feedbacks in 
the C0 2 Climate Problem, ” J ourrial of Geophysical Research, 
vol. 89, No. D6, Oct. 20, 1984, pp. 9668-9672; J. Oerlmans, “Re¬ 
sponse of the Antarctic Ice Sheet to a Climatic Warning: A 
Model Study ” J ournal of Climatology, vol. 2, 1982, pp. 1-11; 
Hugh W. Ellsaesser, “The Climatic Effect of CO,: A Different 
View, ” Atmospheric E nvi r on merit, vol. 18, No. 2, 1984, pp. 431 - 
434; and Sherwood B. Idso, “Do Increases in Atmospheric C0 2 
Have a Cooling Effect on Surface Air Temperature, ” Climato¬ 
logical Bulletin, October 1983, pp. 22-25. 
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research centers, independent researchers, and 
international researchers. 69 

Institutional Mechanisms 

The third ingredient needed to improve the 
government's foresight capability, in addition 
to the technical, informational, and analytical 
advances discussed above, is a supportive in¬ 
stitutional framework. This is a difficult chal¬ 
lenge because foresight, by definition, cuts 
across agency and disciplinary lines. The pri¬ 
mary foresight sectors collectively involve vir¬ 
tually every cabinet-level department of the 
u.s. Government and many of the independ¬ 
ent agencies. Several of the foresight sectors 
singly involve multiple departments and agen¬ 
cies. For example, energy foresight, taken 
alone without considering impacts on and rela¬ 
tionships with other foresight sectors, involves 
departments such as Energy, Interior, and 
Agriculture. Water foresight involves the In¬ 
terior, Agriculture, and Commerce Depart¬ 
ments, among others. And cl imate foresight 
involves the Commerce, Energy, and Defense 
Departments, along with NASA and NSF 
among others. 

Based on the results of the OTA Federal 
Agency Data Request, OTA workshops on re¬ 
lated topics, and interviews with numerous 


**For climate and energy foresight analyses, one illustrative 
approach might be to start with a broad range of policy options 
such as those in Thomas C. Schelling, “Climatic Change: Im¬ 
plications for Welfare and Policy, ” in National Academy of 
Sciences, Changing Climate, op. cit., pp. 449-482, or, for energy 
options, see David J. Rose, Marvin M. Miller, and Carson Ag- 
new, “Reducing the Problem of Global Warming,” Technology 
Re/iew, May/June 1984, pp. 49-58. The sensitivity of the op¬ 
tions to widely varying trends and forecasts could then be ex¬ 
amined, ranging from the results of the major U.S. climate 
models (see, for example, Schlesinger and Mitchell, “Model Pro¬ 
jections, ” op. cit.), to simple extrapolations of current trends, 
to alternative hypotheses such as those developed by John 
Hamaker, Survival of Civilization, (Lansing, MI: Hamaker- 
Weaver Publishers, 1982) and Kenneth E.F. Watt “An Alter¬ 
native Explanation of Widespread Tree Mortality in Europe 
and North America, ” April 1985, in preparation, to the results, 
if available, of U.S.S.R. research and modeling efforts (see, for 
example, A. Ryabchikov, The Changing Face of the E arth: The 
Structure and Dynamics of the Geosphere, Its Natural De/el- 
opment and the Changes Caused by Man (Moscow: progress 
Publishers, 1975), and N.N. Moiseev, V.V. Aleksandrov, et.al., 
“Global Models, the Biosphere Approach (Theory of the 
Noosphere),” International Institute for Applied Systems Anal¬ 
ysis, Laxenburg, Austria, July 1983)). 


Federal agency officials, it seems clear that 
decision support and foresight functions oper¬ 
ate with minimum to no coordination and in¬ 
tegration at the agency level and government¬ 
wide. Computer modeling, decision support, 
and foresight generally are not viewed as part 
of information technology management within 
the agencies or at OMB and gsa. Likewise, 
decision analytic and foresight information 
usually is not easily accessible from agencies 
or governmentwide. 

Thus, an improved government foresight ca¬ 
pability appears to require more effective in¬ 
stitutional mechanisms at both the agency- 
specific and governmentwide levels with re¬ 
spect to coordination of foresight activities 
and exchange of and access to foresight infor¬ 
mation. 

Agency-Specific 

One alternative is to define foresight as be¬ 
ing within the formal definition of the infor¬ 
mation resources management (IRM) concept 
and the responsibility of each agency's IRM 
officer. Right now, IRM does not include fore¬ 
sight, even though foresight is clearly an in¬ 
formation function and heavily dependent on 
the use of information technology. The Paper¬ 
work Reduction Act is silent on foresight per 
se, although the act could be interpreted to ex¬ 
tend to all Federal agency information activi¬ 
ties and all agency use of information tech¬ 
nology. 

The Office of Management and Budget (OMB) 
could require that consideration of foresight 
capabilities and activities be included in each 
agency's IRM plan and in the government¬ 
wide 5-year IRM plan, which is updated an¬ 
nually. The General Services Administration 
could provide guidance to agencies on how to 
incorporate foresight capability as part of the 
triennial IRM review process. (See chs. 2 and 
3 for further discussion of the IRM planning 
and review process.) These changes could also 
be encouraged or directed by Congress through 
legislative amendments (e.g., to the Paperwork 
Reduction Act) and/or reports, accompanying 
the appropriate authorizing and appropria¬ 
tions acts for specific agencies and/or OMB. 
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Another alternative is to include foresight 
formally as part of decision support, and en¬ 
courage or direct agencies to establish a deci¬ 
sion support center, if they do not already 
have one. These centers could be responsible 
for each agency's role in implementing any 
governmentwide foresight initiatives. The key 
point is to establish a focus of responsibility 
for foresight within each agency, such as the 
agency IRM officer or the agency decision sup¬ 
port center or office. 

A final alternative that complements the 
above is to include foresight and decision sup¬ 
port in any enhanced information technology 
innovation program that may be established. 
Should one or more innovation centers be cre¬ 
ated, the center could provide information and 
assistance to individual agencies on imple¬ 
menting their own decision support and fore¬ 
sight centers. 

Governmentwide 

For at least the last 35 years, proposals have 
been made to setup some kind of government¬ 
wide foresight office or the equivalent. For ex¬ 
ample, many of the study commissions estab¬ 
lished over the years, from the 1951 Materials 
Policy Commission to the 1976 National Com¬ 
mission on Supplies and Shortages, have rec¬ 
ommended: 

. . . the establishment of a permanent body 
somewhere high in the executive branch for 
performing continuous futures research and 
analysis .70 

in addition, the 1980 Global 2000 study con¬ 
cluded that establishment of an ongoing insti¬ 
tutional mechanism in the executive branch 
was essential to improve the government's 
long-term global analytic capabilities. Global 
2000 identified numerous problems with the 
computer models that formed the basis for the 
analysis, as discussed earlier. Global 2000 en¬ 
visioned an ongoing institutional entity with 
a major role in addressing these problems and, 
in general, improving the understanding of 
models and the quality and consistency of the 
analytic structures and databases on which 
the models depend. 71 

"Global 2000, Volume Two, op. cit., p. 710. 

71 Ibid., pp. 460-484. 


At present, while there is no government¬ 
wide foresight office, the Council on Environ¬ 
mental Quality in the Executive Office of the 
President (EOP) coordinates an interagency 
Global Issues Working Group. The group 
meets infrequently, with a very limited staff 
and agenda. Nonetheless, it has sponsored the 
preparation of several useful documents pre¬ 
pared by agency staff and/or consultants." 

In the legislative branch, several key mile¬ 
stones establishing the congressional role in 
government foresight include: 73 

• enactment of the Technology Assessment 
Act of 1972, which created the Office of 
Technology Assessment; 

• amendment of House Rule X, Section 
101(b)(1) in 1974 to require each standing 
committee of the House of Representa¬ 
tives, except Appropriations and Budget, 
to include in their oversight duties "fu¬ 
tures research and forecasting on matters 
within the jurisdiction of that committee' 

• authorization of the Congressional Re¬ 
search Service (CRS) to create a Futures 
Research Group; 

• creation of the Congressional Clearing¬ 
house on the Future in 1975; and 

• amendment of Rule 29 of the Standing 
Rules of the Senate in 1977 to require 
each Senate Committee, except Appropri¬ 
ations, to prepare a report on the future 
regulatory impact of proposed legislation. 

Implementation of these actions has been 
mixed. For example, the CRS Futures Re¬ 
search Group has been disbanded as a sepa¬ 
rate entity, but its functions have been dis¬ 
persed to other CRS divisions-principally the 
Government Division and the Science Policy 
Research Division. Relatively few House com¬ 
mittees have conducted foresight hearings 


72 See testimony of A. Alan Hill, Chairman, Council on Envi¬ 
ronmental Quality, Executive Office of the President, before 
the Apr. 30, 1985, joint hearing on “Global Forecasting Capa¬ 
bility of the Federal Government, ” conducted by the Subcom¬ 
mittee on Government Efficiency of the Committee on Gov¬ 
ernmental Affairs and the Committee on Environment and 
Public Works, U.S. Senate. 

73 U.S. Congress, House of Representatives, Committee on 
Energy and Commerce, Congressional Foresight: History, Re¬ 
cent Experiences, and Implementation Strategies, a report pre¬ 
pared by the Congressional Research Service, 97th Cong., 2d 
sess., December 1982, pp. 3-4. 
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under House Rule X, but those few have com¬ 
piled quite a substantial body of useful informa¬ 
tion. Two of the most active House commit¬ 
tees with respect to foresight—the Committee 
on Energy and Commerce and the Committee 
on Science and Technology-issued at least six 
reports on foresight topics between May 1976 
and April 1983. 74 Finally, although OTA does 
not generally issue foresight reports per se, 
foresight on advances in science and technol¬ 
ogy and their implications are incorporated 
into many OTA studies and reports. 

The current debate focuses in part on what 
kind of new or revised executive branch mech¬ 
anisms are needed to facilitate government 
foresight, on the assumption that most fore¬ 
sight activities occur in the agencies and that 
coordination of these activities must come 
primarily from the executive branch of gov¬ 
ernment. 

The basic alternatives, other than doing 
nothing, involve strengthening the foresight 
functions of an existing office (or offices) or 
establishing a new office. While a government¬ 
wide foresight office could, in theory, be lo¬ 
cated in any department or agency, most pro¬ 
posals suggest a location in the EOP, on the 
grounds that cabinet departments are much 
more likely to cooperate with an EOP entity. 
Several existing EOP offices are potential can¬ 
didates for stronger foresight responsibilities 
-the Council on Environmental Quality, OMB, 
the Office of Science and Technology Policy, 

‘I bid.; U.S. Congress, House of Representatives, Commit¬ 
tee on Science and Technology, Subcommittee on the Environ¬ 
ment and the Atmosphere, Long Range Planning, a report pre¬ 
pared by CRS,94th Cong.. 2d sess..Mav 1976; U. S. Congress, 
House of Representatives, Committee on Energy and Com¬ 
merce. The Strategic Future: Anticipating Tomorrow Crises, 
a report prepared byCRS, 97th Cong.,lstsess., August 1981; 
U.S. Congress, House Committee on Energy and Commerce, 
Strategic Issues: Historical Experience, Institutional Structures 
and Conceptual Frame/vork, a report prepared by CRS, 97th 
Cong., 2d sess.,July 1982; U.S. Congress, House, Committee 
on Energy and Commerce, Subcommittee on Oversight and In¬ 
vestigations and Subcommittee on Oversight and Investiga¬ 
tions and Subcommittee on Energy Conservation and Power, 
Public Issue Early Warning Systems: Legislative and I nstitu- 
tional Alternatives, hearings and workshop. 97th Cong., 2d 
sess., October 1982; U.S. Congress, House, Committee on Sci¬ 
ence and Technology, Subjects and Policy Areas for the Con¬ 
sideration of the House Committee on Science and Technology, 
a report prepared by CRS, 98th Cong., 1st sess., April 1983. 


and possibly the Council of Economic Ad¬ 
visors. 

Legislation to establish a more formalized 
governmentwide foresight function has been 
proposed on several occasions. Most recently, 
in April 1985, the "Critical Trends Assess¬ 
ment Act" (S. 1031) was introduced to estab¬ 
lish an Office of Critical Trends Analysis in 
the EOP, along with an Advisory Commission 
on Critical Trends Analysis. The office would 
identify and analyze critical trends and alter¬ 
native futures based largely on information 
obtained from Federal departments and agen¬ 
cies, as well as on outside sources of informa¬ 
tion. The office would advise the President and 
issue various reports on the key trends and 
their relationship to present and future prob¬ 
lem areas, opportunities, and policy options. 
The act also would require the J oint Economic 
Committee of Congress to prepare a legisla¬ 
tive branch report on critical trends and alter¬ 
natives futures. 75 

S. 1031 was introduced by Senator Albert 
Gore at a joint hearing of the Senate Govern¬ 
mental Subcommittee on Governmental Effi¬ 
ciency, chaired by Senator Charles McC. 
Mathias, and the Senate Committee on Envi¬ 
ronment and Public Works, chaired by Sena¬ 
tor Robert Stafford. The April 30th hearing 
highlighted some of the major arguments for 
and against government foresight and a gov¬ 
ernmentwide foresight office. Basically, none 
of the witnesses argued that there should be 
no government foresight. All agreed that gov¬ 
ernment policymaking should take into ac¬ 
count the best available information and anal¬ 
yses concerning the future. All agreed that 
computer modeling has a legitimate role in 
foresight and policymaking, although views 
differed on the importance of this role. 

DOE Deputy Secretary Danny Boggs high¬ 
lighted the limitations of models due to in¬ 
ferior or incomplete input data, mathematical 
and conceptual errors in building the model, 

“ S. 1031, the Critical Trends Assessment Act, Apr. 30, 
1985, 99th Cong.lstsess. For discussion of prior legislative 
initiatives, see, for example, Lindsey Grant, Thinking Ahedd, 
op. cit.; and Joseph F. Coates, “Foresight,” op. cit. 
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and inadequate theoretical understanding of 
the processes being modeled. He believes that 
advances in computing power have outstripped 
advances in the theoretical underpinning of 
computer modeling. Mr. Boggs also expressed 
concern about the apparent bias in computer 
models, and especially global computer models, 
toward a negative future, and cited several 
previous energy supply, demand, and price 
forecasts (both governmental and private sec¬ 
tor) that have proven to be far too pessimis¬ 
tic. Mr. Boggs cited the efforts of the El A to 
improve the quality of computer-based mod¬ 
els and forecasts. 76 

Senator Gore emphasized that a Critical 
Trends Office would not be a central planning 
agency trying to impose a uniform view of the 
world, but would help the government make 
more effective use of the already substantial 
level of data collection and modeling activity. 
Mr. Lindsey Grant, a former Deputy Assis¬ 
tant Secretary of State, testified that such an 
office could help improve understanding of 
what databases and models already exist and 
how these resources could be used for more in¬ 
formed government policymaking. Senator 
Mathias outlined what he views as the high 
payoff of improved global foresight in areas 


’"See testimony of Danny J. Boggs, Deputy Secretary. U.S. 
Department of Energy, before the Apr. 30. 1985. joint hearing 
on “Global Forecasting Capability of the Federal Government,” 
conducted by the Subcommittee on Government Efficiency of 
the Committee on Governmental Affairs, and the Committee 
on Environment and Public Works, U.S. Senate. 


such as long-term export and import needs 
of U.S. trading partners; long-term supply 
and demand for energy and food; and prepar¬ 
ing for and responding to natural disasters 
such as crop-freezes, earthquakes, floods, and 
droughts. 77 

OTA did not analyze the various institution¬ 
al options. However, three things seem clear. 
First, many of the applications of information 
technology considered throughout this chap¬ 
ter (as well as, to some extent, throughout ch. 
7 on electronic databases and dissemination 
of government information) are likely to make 
the job of any potential governmentwide fore¬ 
sight office more feasible than in the past. Sec¬ 
ond, many of the options for improved deci¬ 
sion support (e.g., guidelines on model 
evaluation, clearinghouse or index to major 
models and databases, testing and develop¬ 
ment of decision conference techniques) con¬ 
sidered earlier are also likely to facilitate im¬ 
proved foresight-both agency-specific and 
governmentwide. Three, in order to realize the 
potential for improved foresight, some strength¬ 
ened central coordinating mechanism appears 
to be necessary in order to ensure high-level 
support, adequate agency cooperation, and ef¬ 
fective implementation of whatever specific 
measures are agreed to by Congress and the 
President. 


”See statements G f Senator Albert Gore, senato Charles 
McC. Mathias, and Mr. Lindsey Grant before the joint hear- 
ing, ibid. 
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Chapter 7 

Electronic Databases and Dissemination 

of Government Information 


SUMMARY 


The importance of the public information 
functions of the Federal Government has been 
recognized since the founding of the Repub¬ 
lic. Congress has taken a long series of actions 
to institutionalize these functions, by estab¬ 
lishing, for example, the national libraries (of 
Congress, Medicine, and Agriculture), Govern¬ 
ment Printing Office, Federal Depository Li¬ 
brary Program, and National Technical Infor¬ 
mation Service, and enacting laws such as the 
Public Printing Act, Freedom of Information 
Act, Federal Program Information Act, and 
Government in the Sunshine Act. 

Public information, that portion of govern¬ 
ment information that is not personal, propri¬ 
etary, or classified (or otherwise subject to 
Freedom of Information Act (FOIA) exemp¬ 
tions), is vital to the missions of virtually 
every department and agency of government, 
and runs the gamut from reports, periodicals, 
directories, and handbooks; to rules, regula¬ 
tions, and circulars; to scientific and techni¬ 
cal information, statistical data, satellite im¬ 
agery, and computer models; to maps, charts, 
and photographs. 

Flowever, new public information issues are 
being raised (and old ones exacerbated) by the 
confluence of several key trends: the continu¬ 
ing importance of public information; the re¬ 
duction of paperwork and publications (in part 
due to requirements of the Paperwork Reduc¬ 
tion Act (PRA) and Deficit Reduction Act); the 
growing role of the private sector (which de¬ 
pends heavily on the use of modern informa¬ 
tion technology); and the increasing Federal 
agency use of electronic collection, mainte¬ 
nance, and dissemination of public infor¬ 
mation. 


Use of information technology-such as elec¬ 
tronic document filing, computer-aided sur¬ 
veys, computerized databases, optical disks, 
electronic mail, electronic remote printing, and 
electronic bulletin boards-could revolution- 
ize the public information functions of govern¬ 
ment. There are already numerous Federal 
agency pilot projects, and some of the more 
visible ones have generated intense contro¬ 
versy. Once again, the issues are complicated 
because of inherent tensions involving public 
access and the public's right to know, the role 
of Federal agencies in actively disseminating 
public information, management efficiency 
and cost reduction, private sector cooperation 
and competition, and, particularly for scien¬ 
tific and technical information, national secu¬ 
rity and foreign trade concerns. 

OTA concluded that further research in this 
area is warranted, but that, ultimately, Con¬ 
gress is likely to be called on to update exist¬ 
ing public information laws and address a va¬ 
riety of issues, such as: 

• the cost-effectiveness of electronic infor¬ 
mation options; 

• the equity of access to electronic govern¬ 
ment information; 

• the private sector role in Federal electron¬ 
ic information activities; 

• the institutional responsibility for policy 
and operations concerning government in¬ 
formation collection and dissemination; 

• the need for a public information index or 
clearinghouse; 

• mechanisms for exchange of learning from 
innovative electronic information activities; 

• use of information technology in Freedom 
of Information Act implementation; 
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• electronic recordkeeping and archiving; 

• scientific and technical information ex¬ 
change; and 

• other issues—transborder information 
flow, depository library system, Federal 
statistical system, and copyright pro¬ 
tection. 

OTA also reviewed innovative activities in 
selected States (Michigan, Virginia, Oregon, 
North Carolina, California, and Florida) and 
localities (Lane County, Oregon; Columbus, 
Ohio; and Beverly Hills, Irvine, Pales Verdes, 
and Buena Park, California). The results, com¬ 
bined with those from OTA's Federal Agency 
Data Request, indicate that information tech¬ 
nology can facilitate public access to govern¬ 
ment information. Two applications appear to 
have noteworthy potential: 


1. electronic access to information about the 
process and results of government activ¬ 
ities, especially decisionmaking activities; 
and 

2. access (electronic where feasible) to the 
databases and computer models used by 
government agencies to develop and eval¬ 
uate options and formulate positions on 
various issues. (Seech. 6for related dis¬ 
cussion. ) 

This potential depends in good part on an in¬ 
terested and educated citizenry, as well as on 
the absence of technical and cost barriers. 
Nonetheless, information technology appears 
to offer significant potential to implement pub¬ 
lic access to, as well as dissemination of, gov¬ 
ernment information. 


INTRODUCTION 


Information technology holds out the prom¬ 
ise of faster, cheaper, and more efficient col¬ 
lection (e.g., through computer-aided surveys 
or document filings), storage (e.g., in comput¬ 
erized databases, optical disks), and dissemi¬ 
nation of government information (e.g., via 
electronic mail, interactive data networks, 
electronic bulletin boards, remote printing-on- 
demand, and computer tape exchange). OTA's 
preliminary research in this area suggests that 
the Federal Government is at or near the 
threshold of a major transition toward greater 
use of information technology for managing 
government information. 

At the same time, because government in¬ 
formation is vital to so many users-in and 
outside of government-and central to numer¬ 
ous public laws and agency missions, this tran¬ 


sition is being closely watched and is raising 
a wide range of issues. Indeed, several pilot 
projects have become highly controversial. 
This is in large part because the policy frame¬ 
work for agency applications (e.g., electronic 
filing, database creation, and remote printing) 
is not clear. 

OTA concluded that the technological pos¬ 
sibilities, institutional alternatives, and pol¬ 
icy options deserve further research attention, 
but that, ultimately, Congress is likely to be 
called on to update existing public laws—or 
enact new ones—for this emerging Federal 
electronic information environment. 

The results of OTA's preliminary research 
on this topic are presented below, including 
a discussion of key trends and issues. 


KEY TRENDS 


Continuing Importance of 

Government Information 

The transition of the Federal Government 
from paper-based to greater electronic collec¬ 
tion, maintenance, and dissemination of infor¬ 


mation is controversial because of the impor¬ 
tance placed on government information itself. 

For purposes of this analysis, OTA defined 
"government information" as information col¬ 
lected and/or developed at Federal Govern- 
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merit expense (i.e., with public funds) to carry 
out government functions and agency mis¬ 
sions (whether or not the information itself is 
explicitly authorized or required by statute). 
Government information includes everything 
that is legally avail able to the public, as well 
as those specific types of information re¬ 
stricted from public access under the Freedom 
of Information Act exemptions (e.g., law en¬ 
forcement, investigative, confidential, propri¬ 
etary, and classified information). In this pre¬ 
liminary research, OTA focused primarily on 
government information that is publicly avail¬ 
able, i.e., "public" information. Such informa¬ 
tion runs the gamut from statistical data, com¬ 
puter models, reports, periodicals, directories, 
and handbooks; to rules, regulations, and cir¬ 
culars; to maps, charts, and photographs. 1 

The importance of the public information 
functions of the Federal Government has been 
recognized since the founding of the Repub¬ 
lic. Congress has taken a long series of actions 
to institutionalize these functions, as illus¬ 
trated by the establishment of the Library of 
Congress in 1800, Library of the Surgeon Gen¬ 
eral 's Offi ce i n 1836 (I ater to become the N a- 
tional Library of Medicine), Government Print¬ 
ing Office (GPO) in 1860, National Agricultural 
Library in 1862, Federal Depository Library 
Program in 1913, and National Technical In¬ 
formation Service in 1970. 2 

In addition, Congress has articulated the im¬ 
portance of access to and dissemination of 
public information in enacting, for example, 
the Freedom of Information Act in 1966, Pub¬ 
lic Law 91-345 establishing the National Com¬ 
mission on Libraries and Information Science 
in 1970, the Federal Program Information Act 
(concerning information about Federal assis¬ 
tance programs), and the Government in the 
Sunshine Act in 1976. 3 


'For a complete discussion of definitions and types of gov¬ 
ernment information, see Charles R. McClure and Peter Her- 
non, Federal Government Provision of Public I nformation: Is¬ 
sues Related to Public Access, Technology, and Laws/Reg¬ 
ulations, OTA contractor report, Dec. 28, 1984. 

-See Ibid.; and Marilyn Gell Mason. The Federal Role in Li¬ 
brary and I nformation Services (White Plains, NY: Knowledge 
Industry Publications, 1983). 

Ibid. 


Congress has enacted numerous public laws 
assigning public information functions to spe¬ 
cific Federal agencies. According to the Con¬ 
gressional Research Service, Congress enacted 
a total of 92 laws during the last four Con¬ 
gresses (95th through 98th) on government in¬ 
formation systems, clearinghouses, and dis¬ 
semination, In the 98th Congress alone these 
laws spanned the information spectrum from 
alcohol and drug abuse, education of the hand¬ 
icapped, smoking health hazards, and adult 
and vocational education to arctic research, 
water resources, and hazardous waste control. 4 
As further illustration, 28 bills on public in¬ 
formation topics had been introduced in just 
the first 6 months of the 99th Congress, that, 
if enacted, would establish the following kinds 
of government information activities (some 
bills proposed more than one kind of activity ): 5 

• provide information on request (9 bills), 

• establish information clearinghouse (8), 

• collect information (8), 

• disseminate information (7), 

• establish national database or directory 
(5), and 

• establish uniform information reporting 
procedures (5). 

Reduction of Paperwork and 
Publications 

Congress has also expressed the desire to re¬ 
duce the paperwork burden of the Federal 
Government and redundancy or inefficiency 
in government data collection efforts, as re¬ 
flected in enactment of PRA in 1980. In addi¬ 
tion, the Office of Management and Budget 
(OMB) has led a strong effort to reduce the 
cost of government public information activ¬ 
ities, in part on its own initiative and in part 


4 SandraN. Milevski and Robert L. Chartrand, “ Informa¬ 
tion Policy: Legislation of the 95-98th Congresses, With Se¬ 
lected Bills of the 99th Congress,” Congressional Research Serv¬ 
ice, Library of Congress, June 1985. 

^SandraN. Milevski, CRS, June 1985. 

6 See, for example, Office of Management and Budget, 
“Elimination of Wasteful Spending on Government Periodicals, 
Pamphlets, and Audiovisual Products,” Bulletin No. 81-16, Apr. 
21, 1981; and Office of Management and Budget, “Elimination 
and Consolidation of Government Periodicals and Recurring 
Pamphlets, ” Bulletin No. 81-16, Supplement No. 1, Oct. 9, 1981. 
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in response to the Paperwork Reduction Act 
of 1980 (with respect to information collection 
activities) and the Deficit Reduction Act of 
1984 (with respect to publishing, public affairs, 
and audiovisual activities). 

OMB claims that 3,848 of the approximate¬ 
ly 10,000 publications in the Federal inventory 
have been eliminated or consolidated and 
another 3,100 have been cut back. 7 

With respect to paperwork reduction, OMB 
has given priority to reducing the paperwork 
burden (specific annual reduction goals were 
included in the act) defined in terms of the "in¬ 
formation collection budget, " that is, the num¬ 
ber of hours estimated to fill out government 
forms. OMB claims a net reduction of 36 per¬ 
cent in the paperwork burden between 1980 
and 1984. 8 

In combination with the Administration's 
program to reduce fraud, waste, and abuse, 
OMB worked to eliminate or consolidate 3,848 
government publications (as noted above) and 
close or downgrade 111 government printing 
plants. In response to the Deficit Reduction 
Act of 1984, OMB is proposing further reduc¬ 
tions in publishing and audiovisual activities 
and in public affairs activities. However, the 
amount of the reductions is less than that sug¬ 
gested by the act, because, according to OMB, 
any further reductions would compromise es¬ 
sential agency missions. 9 

To provide further confirmation of reported 
reductions, OTA asked agencies to provide (to 
the extent available) budget, staffing, and ac¬ 
tivity data for printing and publishing in fis- 


'Office of Management and Budget, Management of the 

United States Government: Fiscal Year 1986, January 1985, 
pp. 17-18. 

‘Office of Management and Budget, Managing Federal In- 
formation Resources, third annual report under the Paperwork 
Reduction Act of 1980, June 1984, pp. 8-9; and Office of Man¬ 
agement and Budget, information Collection Budget of the 
United States Government, fiscal year 1985, Apr. 12. 1985. 

‘OMB, Management of the U.S. Government, op. cit., pp. 
88-91. Some groups, such as Ralph Nader's Public Citizen, be¬ 
lieve that public information cutbacks have already significantly 

i mpai red agency functions. See Public Citizen, Starving for NU- 
trition Information From Reagan's USDA, August 1984; Public 
Citizen, Gasping for Information at Reagan's ERA, October 
1984; and Public Citizen, Lights Out at DOE: How Reagan Has 
Put America in the Dark About Energy, November 1984. 


cal years 1980 and 1984 (actual by year), 1985 
(projected), and 1986 (anticipated). Thecom- 
pl eteness of the responses vari ed wi del y, but 
many agencies did indicate a reduction in 
staff, and frequently in budget as well, for 
printing and publishing, along with a reduc¬ 
tion in the number of titles and copies pre¬ 
pared. 10 

These developments have, to some extent, 
given more impetus to examining electronic 
alternatives to paper-based public information 
systems, on the premise that electronic alter¬ 
natives will be less costly and more effective. 

Growing Role of the Private Sector 

The role of information technology (e.g., 
computers, telecommunications, and electron¬ 
ic printing) in the larger sense has been as a 
catalyst of change. The technology has vastly 
expanded the options for the collection, main¬ 
tenance, and dissemination of all kinds of in¬ 
formation, including public information, and 
has helped spawn a new industry-the "infor¬ 
mation industry. " This industry depends 
heavily on the use of modern information tech¬ 
nology and is aggressively seeking opportu¬ 
nities to serve all markets-induding the pub¬ 
lic information market. Thus, there are now 
numerous private companies that seek to pro¬ 
vide public information products or services, 
either under contract to the government, in 
competition with the government, and/or as 
a complement to the government by adding 
value to or repackaging government infor¬ 
mation. 

The I nformation Industry Association (11A), 
a trade association representing information 
publishers and providers of all varieties, claims 
that U.S. information companies had revenues 
in 1983 of $13 billion, growing at 20 percent 
per year. The 11A has over 450 members, in¬ 
cluding firms like Chase Econometrics, Dun 
& Bradstreet, University Microfilms, McGraw- 
Hill, Dow J ones, and Congressional Informa¬ 
tion Service. 11 

‘"Based On the response Of 125 agency’ Components to 
OTA’s Federal Agency Data Request. 

1 1 Testimony of peter Marx on behalf of the I nformation I n- 
dustry Association before U.S. House of Representatives, Com- 
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Thus, the information industry seeks to use 
information technology to help meet public 
information needs generally on a commercial, 
for-profit basis. At the same time, public in¬ 
formation advocates, such as librarians and 
university researchers, are concerned that pri¬ 
vate industry involvement in electronic collec¬ 
tion, maintenance, and dissemination of gov¬ 
ernment information may serve to reduce the 
availability of that information. 12 

Issues raised by the private sector role in 
the provision of government information have 
stimulated a large number of conferences, re¬ 
ports, and hearings. For example, in 1982, the 
National Commission on Libraries and Infor¬ 
mation Science published a report on Public 
Sector/Private Sector Interaction in Providing 
Information Services. 13 Later in 1982, OTA pub¬ 
lished a technical memorandum on MEDLARS 
and Health Information Policy, which gave 
major attention to publicyprivate issues. 14 !n 
1983, the Library of Congress published a re¬ 
port on Public/ Private Interactions: The Im¬ 
plications for Networking. " As a final exam¬ 
ple, in 1984, OTA issued a technical memo¬ 
randum on Remote Sensing and the Private 
Sector. “There have also been several congres¬ 
sional hearings on the topics of government 
provision of public information in competition 


mittee on Energy and Commerce, Subcommittee on Oversight 
and Investigations, Mar. 14, 1985, p. 1. Also see A.C. Nielson, 
The Business of Information, report prepared for the Informa¬ 
tion Industry Association, 1983. 

For a summary of concerns expressed by librarians, re¬ 
searchers, and others in response to OMB s draft circular on 
“Management of Federal Information Resources, ” see Infor¬ 
mation Hotline, special feature, vol. 17, No. 9, October 1985. 

‘U.S. National Commission on Libraries and Information 
Science, Public Sector/Private Sector Interaction in Providing 
Information Services, February 1982. 

'U.S. Congress, Office of Technology Assessment, MEDLARS 
and Health Information Policy—A technical Memorandum, 
OTA-TM-H-11 (Washington, DC: U.S. Government Printing 
Office, September 1982). 

1 U.S. Library of Congress, Network Development Office, 
Public/ Private Sector Interactions: The I mplications for Net¬ 
working, prepared by the Network Advisory Committee, 1983. 

* U.S. Congress, Office of Technology Assessment, Remote 
Sensing and the Private Sector: Issues for Discussion—A Tech¬ 
nical Memorandum,OTA-TM-l SC-20 (Washington, DC: (J. S. 
Government Printing Office, March 1984). 


with the private sector; 17 the Securities and Ex¬ 
change Commission's Electronic Data Gather¬ 
ing, Analysis, and Retrieval system (EDGAR); 18 
electronic collection and dissemination of gov¬ 
ernment information; “and OMB draft and 
final circulars on "Management of Federal In¬ 
formation Resources, " in which the private 
sector is assigned a central role. 20 

Increasing Use of Electronic 
Dissemination 

OTA found that a significant percentage of 
Federal agencies (roughly 40 percent of agen¬ 
cies responding to OTA's Federal Agency 
Data Request) make available or disseminate 
some public information in an electronic for¬ 
mat. The nature and extent of such electronic 
dissemination varies widely. Of those respond¬ 
ing, 47 of 118 agency components reported 
some electronic activity, including all of the 
largest public information providers and all of 
the major Federal statistical agencies, as il¬ 
lustrated in table 7-1. 

The most common electronic dissemination 
activities involve the use of electronic mail (or 
the equivalent) for the distribution of press re¬ 
leases, bulletins, notices, and short reports, 
and the use of computer tapes for distribution 
of statistical databases and reports. Some ex¬ 
amples follow: 

• Economic Research Service (Department 
of Agriculture -Outlook and Situation 


,7 U.S. Congress, House of Represent atives. Committee on 
Government Operations, Subcommittee on Government Infor¬ 
mation and Individual Rights, Government Provision of Infor¬ 
mation Services in Competition With the Private Sector, hear¬ 
ing, 97th Cong., 2d sess., Feb. 25, 1982; see also Representative 
Glenn English, “Electronic Filing of Documents With the Gov¬ 
ernment: New Technology Presents New Problems, ” Congres¬ 
sional Record—House, Mar. 14, 1984, H 1614-1615. 

iB U.S. Congress, House Committee on Energy and Com¬ 
merce, Subcommittee on Oversight and In\.estimations, hear¬ 
ing, Mar. 14, 1985. 

] *See, for example, U.S. Congress, House Committee on 
Government Operations, Subcommittee on Government Infor¬ 
mation, hearing, Oct. 18, 1985. 

'^See, for example, U.S. Congress, House Committee on 
Government Operations, Subcommittee on Employment and 
Housing, hearing, July 17, 1985. Also see Office of Manage¬ 
ment and Budget, “Management of Federal Information Re¬ 
sources’ Federal Register, vol. 50, No. 51, Mar. 15, 1985. The 
final version was issued on Dec. 12, 1985. 
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Table 7-1 .—illustrative Agencies With Some 
Electronic Dissemination of Public Information 


Department of Agriculture 
Economic Research Service 
Statistical Reporting Service 
Food and Nutrition Service 
Human Nutrition Information Service 
Rural Electrification Administration 

Department of Commerce 
Census Bureau 
Bureau of Economic Analysis 
International Trade Administration 
National Bureau of Standards 
National Technical Information Service 
Patent and Trademark Office 

Department of Energy 

Energy Information Administration 
Federal Energy Regulatory Commission 

Department of Health and Human Services 
National Center for Health Statistics 
Centers for Disease Control 
Food and Drug Administration 
Social Security Administration 

Department of the Interior 
Fish and Wildlife Service 
U.S. Geological Survey 
Bureau of Mines 

Department of Justice 
Bureau of Justice Statistics 
National Institute of Justice 

Department of Labor 
Bureau of Labor Statistics 

Department of Transportation 

National Highway Traffic Safety Administration 
Urban Mass Transportation Administration 
Consumer Product Safety Commission 
Federal Communications Commission 
Federal Election Commission 
Federal Emergency Management Agency 
Federal Reserve System 
National Aeronautics and Space Administration 
Small Business Administration 
SOURCE Office of Technology Assessment. 


reports are electronically disseminated 
through AGNET, a computer system 
operated by the University of Nebraska. 
The reports are 32 to 40 pages in length 
(text and tables), number roughly 100 per 
year, and are also available for purchase 
in hardcopy form through GPO. The elec¬ 
tronic reports are derived directly from 
the ERS word-processing system, trans¬ 
mitted to AGNET, and available via dial¬ 
up telecommunications. AGNET controls 
the fees and access. Users range from in¬ 
dividual farm operators to the Govern¬ 


ment of New Zealand to value-added in¬ 
formation providers (e.g., agricultural 
newsletters). 

Bureau of the Census (Department of 
Commerce) -Selected Census data are 
available on-line via a commercial ven- 
dor-Dialog Information Services and the 
Glimpse Corp. Called CENDATA, the on¬ 
line dial-up service also includes Bureau 
news releases, user news bulletins, and 
product information. Census anticipates 
that CENDATA offerings will gradually 
increase over time. Census also sells data 
sets in computer tape and diskette format, 
and distributes the data tapes at no charge 
to the 50 State census data centers. 
National Bureau of Standards (Depart¬ 
ment of Commerce) —Various computer 
tapes generated by NBS scientists and 
engineers are made available through the 
National Technical Information Service 
(NTIS). Also, the NBS National Standard 
Reference Data System provides data¬ 
bases (of physical and chemical properties 
of substances) on magnetic tapes and 
through on-line computer networks, as 
well as in printed form. 

Various Health and Human Services 
Agencies-The National Center for Health 
Statistics makes over 400 data files avail¬ 
able on computer tape, generally via NTIS. 
The Food and Drug Administration uses 
ITT Dialcom for an "electronic bulletin 
board" on a trial basis; electronic notices 
are also available in paper form. The So¬ 
cial Security Administration places se¬ 
lected SSA data in a CompuServe infor¬ 
mation service that is available on a dial-up 
basis. 

National Highway Transportation Safety 
Administration (Department of Transpor¬ 
tation)^ HTSA maintains a Vehicle Bi¬ 
omechanics Testing Data Base that started 
in 1978 and currently contains data on 
800 vehicle crash tests and 900 occupant 
crash tests. The database is available 
directly from NHTSA via computer tape 
and dial-up access, and is free. NHTSA 
also has a toll-free Auto Safety Hotline 
for consumer safety information, and 
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manages a technical reference service for 
highway safety information. 

• National Aeronautics and Space Admin - 
i strati on —NASA has offered NASA 
NEWS since fall 1984. NASA NEWS is 
an electronic database containing press 
releases, shuttle status reports, flight 
schedules, etc.; it is available on a dial-up 
basis from NASA headquarters and field 
offices via the NASA contractor, Dial- 
corn. Users include government agencies, 
contractors, news media, and libraries. 
NASA also maintains an aerospace data¬ 
base that includes about 1.5 million refer¬ 
ences and abstracts of reports and jour¬ 
nal articles. The database is available in 
computer tape format via commercial 
vendors working under an arrangement 
with the American Institute of Aeronau¬ 
tics and Astronautics (the NASA con¬ 
tractor). 

Agency Planning for Government 
Information Revolution 

Despite the fairly widespread agency use of 
electronic dissemination of government infor¬ 
mation, such use is still largely in the forma¬ 
tive stages. Electronic information accounts 
for only a small percentage of the total gov¬ 
ernment information flow. However, the re¬ 
sults of OTA's Federal Agency Data Request 
and examination of selected agency activities 
and plans strongly suggest that major changes 
are likely. Several agencies are experimenting 
with various new technologies and planning 
for expanded use of several that bear directly 
on government information functions. 

The heaviest area of current activity appears 
to be with respect to computerized databases. 
There are estimated to be several thousand in 
the Federal Government already, and several 
agencies are studying new or expanded use of 
computerized databases. 

As an illustration of a recently completed 
(March 1985) study, the Federal Election Com¬ 
mission (FEC) evaluated a pilot project on di¬ 
rect electronic access to Federal campaign fi¬ 
nance data. The pilot project permits eight 


State campaign finance offices in seven States 
to access FEC data directly. The study con¬ 
cluded that this concept could be usefully ex¬ 
tended so that FEC data would be electroni¬ 
cally available at terminals in all States and 
major cities. This is viewed by the FEC as en¬ 
hancing the mission objective of making Fed¬ 
eral campaign finance data widely available to 
government officials, the media, candidates, 
political action committees, party committees, 
academics, and researchers. z ' Continuation of 
the electronic access project is uncertain in 
light of possible agency budget reductions. 

A March 1984 NBS workshop on the effect 
of computers on the generation and use of 
technical data concluded that technical data¬ 
bases are essential toU.S. industry and that 
electronic dissemination has significant advan¬ 
tages. These include the ability to locate 
desired data more reliably and quickly, update 
the data in a more timely fashion, and trans¬ 
fer the data more accurately and less expen¬ 
sively. 22 

As a third example, in 1984, the Federal 
Communications Commission (FCC) con¬ 
cluded an inquiry into the possibility of allow¬ 
ing the public direct electronic access to FCC 
computerized databases. Various respondents 
expressed the desire to have faster and more 
accurate access to FCC data of interest. Af¬ 
ter deliberating on cost, technical, security, 
and other considerations, FCC decided to se¬ 
lect a contractor to make certain that their 
files were available to the public on a commer¬ 
cial basis at a reasonable cost, with NTIS act¬ 
ing as account manager for a third-party con¬ 
tract between the FCC and a vendor. 23 

As a final example, the National Center for 
Health Statistics (NCHS) has a well-developed 
publications survey form. The form goes out 


-■u.s. Federal Election Commission, stateComputerAc¬ 
cess to FEC Federal Campaign Finance Data: Report of a Pi¬ 
lot Project, March 1985. 

J U. S. Department of Commerce, National Bureau of Stand¬ 
ards. The Effect of Computers on the Generation and Use of 
Technical Data, report of a workshop, June 1984. 

- ’U.S. Federal Communications Commission, General Dock¬ 
et No. 83-483, Report and Order, In the Matter of Allowing the 
Public Direct Remote Access to Commission Computer Data 
Bases, Aug. 13, 1984. 



146 


over the signature of the NCHS Director and 
asks respondents, among other things, if they 
are not interested, somewhat interested, or 
very interested in purchasing NCHS informa¬ 
tion by: 24 

• electronic release—direct access through 
computer terminals to the latest NCHS 
data in summary or detailed form; 

• direct computer access to N CH S reports 
prior to publication; 

• automated bibliographic system—di rect 
access through computer terminals to an 
index of NCHS published and unpub¬ 
lished data to determine the availability 
of specific types of data; 

• data networks-access to printed and 
computer products, as well as assistance 
in locating and using data at a regional 
or State center on a cost basis; and 

• Phone-in data line—a users call-in service 
for obtaining the latest summary data on 
selected topics, such as monthly vital sta¬ 
tistics data. 

Several of these applications come very close 
to, if not actually embracing, printing-on- 
demand or remote electronic printing- 
whereby, for example, government documents 
would be stored in electronic form and trans¬ 
mitted electronically to the location of the user 
where a hardcopy would be printed out. In re¬ 
sponse to the OTA Federal Agency Data Re¬ 
quest, 21 out of 114 agencies reported use of 
printing-on-demand or remote electronic print¬ 
ing. It appears that such use is primarily for 
internal purposes at the present time, but the 
opportunities for use in dissemination of gov¬ 
ernment information are significant. A 1982 
study prepared for the Energy Information 
Administration concluded that they were not 
taking advantage of electronic publishing op¬ 
tions that could reduce costs and increase 
quality and timeliness. 25 Private sector devel- 


;< U.S. Department of Health and Human Services, Public 
Health Service, National Center for Health Statistics, NCHS 
Publications Survey, no date. 

J 'Henry B. Freedman, A Technology Assessment of Elec¬ 
tronic Publishing Options for the Energy I nformation Admin - 
istration National Energy I nformation Center, March 1982. 


opment and use of electronic printing and pub¬ 
lishing technologies are growing rapidly." 

In addition, agencies already report signif¬ 
icant use of electronic mail and audioconfer¬ 
encing, and emerging use of computer-confer¬ 
encing, videoconferencing, and optical disks. 
All of these technologies have direct applica¬ 
tion to dissemination of government informa¬ 
tion. The number of agencies using optical 
disks is projected to quintuple, the number 
using videoconferencing is projected to triple, 
and the number using computer-conferencing 
is projected to double, based on current plans. 


Current use Planned use 


Technology 

Number * 

Percent Number 

Percent 

Electronic mail 

97 

7270 

115 

869. 

Audioconferencing 

84 

63 

86 

64 

Computer-conferencin 

g 16 

12 

29 

22 

Videoconferencing 

10 

8 

30 

22 

Optical disks 

6 

4 

39 

29 


* Husetlonl 84 agencies responding to this part of OTA's Federal Agency Data 
Request 


in sum, the actions and plans of individual 
Federal agencies clearly indicate that elec¬ 
tronic information technology is destined to 
become an increasingly significant part of gov¬ 
ernment information functions. A good illus¬ 
tration is the year 2000 planning scenario of 
the Defense Technical Information Center 
(DTIC), summarized below: 27 

DTIC will be a highly automated operation 
where the vast majority of data transfers are 
electronic. It will be situated in an environ¬ 
ment where all users have access to computer 
work stations; where computer storage has 
the density, access speeds, and reliability to 
permit full-text storage of all items; . . . where 
mailing of paper products has been replaced 
by electronic transmissions; [and] where the 
power/speed of computers and the sophisti¬ 
cation of software eliminate the need for both 
manual indexing and development of intri¬ 
cate search strategies. 

‘•See, for example, Andrew Parker, “A Colourful Revolu¬ 
tion in Printing, ” New Scientist, Sept. 26, 1985, pp. 52-55; Erik 
Sandberg-Diment, “Desktop Publishing Comes of Age, ” New 
York Times, Nov. 26, 1985, p. C4; Johanna Ambrosio, “Pub¬ 
lishing In-House Can Sharpen DP Image, ” Computerworid, 
Dec. 2, 1985; and Patricia McShane,“Printing With Light 
Speed,” Computer Decisions, Dec. 17, 1985, pp. 78-81. 

^U.S. Department of Defense, Defense Logistics Agency, 
Defense Technical Information Center, DTIC 2000: A Corporate 
Plan for the Future, DTIC/TR-84/3, July 1984. 
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KEY ISSUES 


OTA identified several issues that warrant 
further study and may, ultimately, require 
congressional action. The purpose here is to 
identify issue areas and some possible op¬ 
tions—not to analyze the issues in depth or de¬ 
velop and evaluate options in any detail. 28 

Further Study of Cost-Effectiveness 

of Electronic Information Options 

Many agencies are moving ahead on the as¬ 
sumption and belief that electronic collection, 
maintenance, and dissemination of govern¬ 
ment information is cost-effective. The results 
of those agency studies reviewed by OTA sug¬ 
gest that this may be the case. However, most 
agencies engaged in electronic dissemination 
have not conducted such a study; nor has there 
been a governmentwide study on this topic. 

Based on the results of the OTA Federal 
Agency Data Request, only 10 agencies (9 per¬ 
cent of all 125 agencies responding; 21 percent 
of agencies using electronic dissemination) re¬ 
port any kind of study on the impacts of elec¬ 
tronic dissemination. 

If indeed the information currently available 
is not adequate as a basis for public policy¬ 
making, one or more of the following options 
could be pursued: 

1. further studies by specific agencies (e.g., 
in the process of authorization and appro¬ 
priation actions); 

2. preparation of a governmentwide report 
by one of the central agencies (e.g., Office 
of Information and Regulatory Affairs/ 
OMB; Office of Information Resources 
Management/General Services Adminis¬ 
tration (GSA); Institute for Computer 
Science and Technology/NBS); and/or 


‘"For further discussion, see McClure and Hernon, Public 
Information, op. cit. Also, OTA has already been asked to ex¬ 
amine many of these issues in detail, as outlined in a letter from 
Senator Charles McC. Mathias, Chairman, and Representative 
Frank Annunzio, Vice Chairman of the Joint Committee on 
Printing, U.S. Congress, to OTA Director John H. Gibbons, 
dated May 17, 1985. Related letters of request were sent to the 
General Accounting Office and Government Printing Office 
with respect to work complementary to that requested of OTA. 


3. studies by one or more of the congres¬ 
sional support agencies (i.e., Congression¬ 
al Budget Office, Congressional Research 
Service, General Accounting Office (GAO), 
OTA). 

Equity of Access to Electronic 
Government I nformation 

One of the most basic issues involves the ex¬ 
tent to which electronic options affect the rela¬ 
tive availability of government information to 
various publics. As noted earlier, the impor¬ 
tance of government information is reflected 
in numerous public laws, but also in the 
strongly held views of librarians, educators, 
researchers, public interest groups, the press, 
and others who believe that government infor¬ 
mation is an important public good and cen¬ 
tral to the fabric of American society." 

The core issue is whether the shift from a 
substantially paper-based to a largely electron¬ 
ic-based government information system will, 
absent policy intervention, create new inequi¬ 
ties and barriers to access. One concern is that 
electronic dissemination will advantage pri¬ 
marily those with the funds and/or technical 
sophistication needed to use computerized 
databases. This concern is amplified to the ex¬ 
tent that electronic dissemination is viewed as 
a luxury or special service and offered on a cost 
recovery and/or market pricing basis. An alter¬ 
native approach would be to establish the elec¬ 
tronic format as the primary format, to be 
widely accessible by citizens and interested 


''See, for example, Lewis M. Helm, Ray Eldon Hiebert, 
Michael R. Naver, and Kenneth Robin, Informing the People 
(New York: Longman, 1981); Donna A. Demac, Keeping Amer¬ 
ica Uninformed: Government Secrecy in the 1980 (New York: 
The Pilgrim Press, 1984); Carol A. Tauer, “Social Justice and 
Access to Information, ” Minnesota Libraries, summer 1982, 
pp. 39-42; Marc A. Levin, “Access and Dissemination Issues 
Concerning Federal Government Information, ” Special Li¬ 
braries, April 1983, pp. 127-137; Mimi Abramovitz, “Secrecy 
in the Welfare State, ” Social Policy, spring 1985, pp. 52-55; nu¬ 
merous statements submitted in response to OMB s draft cir¬ 
cular on “Management of Federal Information Resources” as 
abstracted in I nformation Hotline, October 1985; and Eugene 
Garfield, “Society’s Unmet Information Needs, ” ASZS Bulle¬ 
tin, October/November 1985, pp. 6-7. 
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publics, with paper copies viewed as a luxury 
or special service. 

In reality, the situation is far more complex, 
si nee there is a range of users with different 
needs, motivations, and abilities to pay. For 
example, the additional cost of obtaining fi¬ 
nancial information from the Securities and 
Exchange Commission (SEC) in electronic 
form may be insignificant to a trade associa¬ 
tion or private firm, but substantial to a grad¬ 
uate student or researcher. And the value of 
information to the government and the user 
also varies widely. Thus, public policy may de¬ 
termine that health and safety information 
should be disseminated without cost to the 
user and as expeditiously as possible, whereas 
trade or industrial market information should 
be priced on a full cost-recovery basis. 

In sum, the equity issue is complex, and in¬ 
volves a wide range of government informa¬ 
tion categories, public policy objectives, user 
groups, and dissemination technologies. At 
present, Federal agencies formulate their pub¬ 
lic information strategies within an equally 
complex set of public laws and OMB rules and 
regulations. The shift to electronic collection, 
storage, and dissemination strategies appears 
to be aggravating these already difficult pol¬ 
icy choices, to the extent that Congress may 
need to provide revised or new guidance. 

Private Sector Role in Federal 
Electronic Information Activities 

Another basic issue involves the appropri¬ 
ate role (or, more realistically, roles) of private 
firms in the collection, maintenance, and dis¬ 
semination of government information. The in¬ 
formation industry is predicated on the use of 
information technology, and as the govern¬ 
ment shifts to greater emphasis on using the 
technology, opportunities for conflict, compe¬ 
tition, and cooperation will inevitably increase. 

An example of cooperation is the Depart¬ 
ment of Agriculture (USDA) electronic data¬ 
base for time-sensitive data such as market, 
crop, and livestock reports, economic outlook 
reports, and the like. USDA contracted for a 


private vendor on a competitive basis, and ulti¬ 
mately selected Martin Marietta Data Sys¬ 
tems. Martin Marietta agreed to utilize stand¬ 
ard rates, accept whatever data USDA placed 
on the system, release the data for equal ac¬ 
cess to all users, according to the USDA sched¬ 
ule, and delete the data when requested by 
USDA. Martin Marietta further agreed to an 
anti-competitive provision prohibiting its re¬ 
sale of the data at retail, thus removing a po¬ 
tentially unfair competitive advantage. The 
system provides data and reports instantane¬ 
ously in electronic format. This is an example 
where the government agency (USDA) has re¬ 
tained complete control over the data. But 
even here, an equity issue still exists because 
users who want instant electronic access must 
pay an extra charge, however nominal ($150 
per month minimum fee), and must have an 
electronic terminal, thus potentially disadvan¬ 
taging users who lack the money, equipment, 
or both. 30 

An example of competition is the Depart¬ 
ment of Labor (DOL) proposal to make key 
statistical data on the labor force, price in¬ 
dices, unemployment, and the like available to 
the public in on-line electronic format via 
NTIS. The data were to have been provided 
in chart and tabular as well as raw form. A 
private firm, Data Resources, Inc., saw this 
proposal as direct competition and opposed 
implementation. In part as a result, DOL with¬ 
drew the proposal. 31 But this situation raises 
the issue of whether and when government 
provision of public information should be 
limited to those areas where there is no cur¬ 
rent or potential private vendor. 

Finally, two examples of conflict are the elec¬ 
tronic filing project of SEC and the electronic 
trademark database project of the Patent and 


"Roxanne Williams, “Getting the Word Out: The Agricul¬ 
ture Department’s New System for Electronic Dissemination 
of Time Sensitive ‘Perishable’ Data, ” Government Data Sys¬ 
tems, June/July 1985, pp. 28-29; “USDA’s Computerized In¬ 
formation Service, ” / nformation Hotline, September 1985. pp. 
3-4. 

• Reinhardt Krause, “Policy Shift: Using the Private Sector 
to Market Federal Databases, ” Government Data Systems. 
June/July 1985. pp. 25-26. 
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Trademark Office (PTO). In both cases, auto¬ 
mation is generally regarded as potentially 
cost-effective. But SEC sought to finance the 
computerized system for corporate filings 
through an exchange agreement with a private 
vendor, whereby the vendor would recover the 
costs of system development and operation 
through user fees for basic services and sales 
of value-added services. The vendor would 
have exclusive rights to the sale of on-line bulk 
data. Likewise, PTO sought to finance the 
preparation of a computerized database for its 
trademark registration information by exchange 
agreements with private vendors, whereby the 
vendors would receive free copies of present and 
future trademark information and be granted re¬ 
strictions on public access to advanced search 
functions. This apparently was intended to 
protect the vendors' value-added markets. 
PTO subsequently relaxed the public access 
restrictions, but imposed a royalty fee that 
was to be passed on to the vendors. 32 

The SEC and PTO electronic information 
projects have raised numerous questions, such 
as the impact on public access and industry 
competition; the use or misuse of exchange 
agreements; whether Federal procurement 
laws and regulations have been properly fol¬ 
lowed; the adequacy of cost-benefit and feasi¬ 
bility studies; potential conflict of interest 
with vendors; and whether and under what 
conditions vital government information 
should be under the control of, and accessible 
only through, private firms. 33 


’-On the SEC project, see statements of James Watts of 
GAO and Peter Marx of the Information Industry Association 
before the Mar. 14, 1985, hearing of the Subcommittee on Over¬ 
sight and Investigations, House Committee on Energy and 
Commerce; on the PTO project, see U.S. Comptroller General, 
Patent and Trademark Office Needs to Better Manage Auto¬ 
mation of Its Trademark Operations, GAO/ IMTEC-85-8, Apr. 
19, 1985, and testimony of Thomas P. Giammo before the Oct. 
18, 1985 hearing of the Subcommittee on Government Infor¬ 
mation, House Government Operations Committee. 

’’See Mitch Betts, “Congress Steps Up Role in Federal 
Automation Projects, ” Computerworld. July 15, 1985; and 
statements of Guy Blynn of the U.S. Trademark Association 
and Herbert Wamsley of the Intellectual Property Owners, Inc., 
before the Oct. 1, 1985, hearing of the Subcommittee on Gov¬ 
ernment Information, House Government Operations Com¬ 
mittee. 


I n a broader context, these issues are par¬ 
ticularly significant given that the OMB draft 
circular on "Management of Federal Informa¬ 
tion Resources" emphasizes reliance on the 
private sector and user charges. For example, 
the circular, while recognizing that govern¬ 
ment information dissemination can be neces¬ 
sary and even essential to agency missions, 
permits such dissemination by the govern¬ 
ment itself only if the information product or 
service is not already provided by other gov¬ 
ernment or private sector organizations or 
could not reasonably be provided by such 
organizations in the absence of agency dissem¬ 
ination. 34 And, while the draft circular notes 
that dissemination should be conducted "in a 
manner that reasonably ensures the informa¬ 
tion will reach . . . the public . . . ," the circu¬ 
lar requires that "maximum feasible reliance" 
be placed on the private sector for dissemina¬ 
tion and that costs of dissemination be recov¬ 
ered through user charges, where appropri¬ 
ate. 35 

The final version of the OMB circular issued 
in December 1985 gives more explicit recog¬ 
nition to the importance of government infor¬ 
mation. For example, the circular states that 
"government information is a valuable nation¬ 
al resource, " and "[t]he free flow of informa¬ 
tion from the government to its citizens and 
vice versa is essential in a democratic soci¬ 
ety. 136 However, the circular still places heavy 
emphasis on the private sector. Thus, Federal 
agency dissemination must be either "[spec¬ 
ifically required by law" or "[necessary for 
the proper performance of agency functions, 
provided that the information products and 
services disseminated "do not duplicate sim¬ 
ilar products or services that are or would 


a, Office of Management and Budget, “Management of Fed¬ 
eral Information Resources, ” Federal Register, vol. 50, No. 51, 
Mar. 15, 1985, Section 8(a)(8). _ 

•'Ibid. Section 8(a)(g). For turther discussion, see Harold C. 

Relyea, Jane Bortnick, and Richard C. Ehlke, Management of 
Federal Information Resources: A General Critique of the 
March 19$5 OMB Draft Circular-Matters for Possible Con¬ 
gressional Consideration, Congressional Research Service, Li¬ 
brary of Congress, July 5, 1985. 

"Office of Management and Budget, Circular No. A-130+ 
“Management of Federal Information Resources, ” Dec. 12, 
1985, Sections 7(a) and (b). 
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otherwise be provided by other government 
or private sector organizations. ,37 The circu¬ 
lar continues to require that "maximum fea¬ 
sible reliance" be placed on the private sector 
for dissemination, and that costs be recovered 
through user charges, where appropriate. 38 The 
final version of the circular cites OMB Circu¬ 
lars A-76 and A-25 as authorities for maxi¬ 
mum feasible reliance on the private sector 
and for user charges. The draft version implied 
that these provisions were based on the Paper¬ 
work Reduction Act or other general statutory 
authority. 

In sum, OMB appears to have tacitly ac¬ 
knowledged that aspects of the circular deal¬ 
ing with information dissemination do not 
have the clear congressional guidance original¬ 
ly assumed. Nonetheless, OMB has used its 
discretion and general authority to finalize the 
circular's emphasis on the private sector, even 
though Representative Glenn English, Chair¬ 
man of the House Committee on Government 
Operations, Subcommittee on Government In¬ 
formation, among others, had requested that 
the draft circular be reconsidered. 

Institutional Responsibility for 

Government Information Policy 
and Operations 

The shifting of the Federal Government 
toward greater electronic information collec¬ 
tion, maintenance, and dissemination appears 
to be further aggravating conflicts over the 
role of OMB, theJ oint Committee on Print¬ 
ing, and GPO with respect to public infor¬ 
mation policymaking. It also is aggravating 
conflicts between OMB and various other con¬ 
gressional committees with respect to the ap¬ 
plicability and interpretation of the Paperwork 
Reduction Act, and between GPO and NTIS 
and other Federal printing and electronic dis¬ 
semination agencies over future operational 
responsibilities. 

OMB has taken the position that electronic- 
based information dissemination by executive 


37 1 bid., Sections 9(a) and (b). 
Ibid., Sections 1 1(b) and (c). 


branch agencies falls outside of the definition 
of printing and binding in chapter 5 of Title 
44 of the U .S. Code. I n addition, the U .S. De¬ 
partment of J ustice has interpreted the Su¬ 
preme Court's decision in INS v. Chadha 39 
(that struck down the legislative veto as un¬ 
constitutional) as invalidating parts of chap¬ 
ter 5 of Title 44 relating to the control of GPO 
over executive agency printing decisions. The 
printing chapters of Title 44 were originally 
enacted as the Public Printing Act of 1895 and 
were remodified in 1968 by Public Law 90-620. 
Prior efforts to enact a major revision to the 
printing chapters of Title 44 have not reached 
fruition. Thus, Title 44 has not yet been fully 
updated in light of modern information tech¬ 
nology. Congress may wish to include this is¬ 
sue as part of a comprehensive review and re¬ 
vision of Federal public information policies. 

The Paperwork Reduction Act of 1980 does 
provide clear congressional guidance, both in 
the language of the act and the legislative his¬ 
tory, on the need to minimize the Federal 
paperwork collection burden, establish coordi¬ 
nated and uniform Federal information poli¬ 
cies, and minimize the cost to the government 
of collecting, using, and disseminating infor¬ 
mation. 40 

At the same time, the act and its legislative 
history show that the need to maximize pub¬ 
lic access to government information was also 
intended by Congress. For example, the pur¬ 
pose of the act is, among other things, "to 
maximize the usefulness of information col¬ 
lected by the Federal Government," 41 and the 
Senate report states that: 

The Committee expects the Director [of the 
Office of Information and Regulatory Af¬ 
fairs] to take appropriate steps to maximize 
public access to the information the Federal 
Government collects. 42 

The Federal Information Locater System, 
which the PRA of 1980 required OM B to es- 


JY103 S. Ct. 2764 (1983). 
<“44U.S.C. 3501 (1) and (2). 
4144 U.S.C.3501I3). 

«S. Rep. No. 96-930, p. 33. 
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tablish, was also intended to help serve this 
purpose." 

In addition, several new issues have arisen 
since enactment of the PRA in 1980. The con¬ 
gressional debate leading up to enactment of 
the PRA in 1980 did not consider many of the 
current issues, such as equity and private sec¬ 
tor involvement in electronic systems, because 
these issues had not yet developed. Agency 
plans and practices for electronic government 
information systems reached threshold levels 
of visibility and significance only in the last 
few years. Also, the PRA debate, with a fo¬ 
cus on government paperwork and informa¬ 
tion management, did not explicitly consider 
the numerous public laws that assign govern¬ 
ment information functions to numerous Fed¬ 
eral agencies. In sum, PRA provides, at best, 
limited and mixed guidance to OM B with re¬ 
spect to the electronic collection, maintenance, 
and dissemination of government information. 
Congress may wish to update and clarify its 
intent with respect to the public information 
aspects of PRA through appropriate amend¬ 
ments and/or oversight and authorizing reports. 

With respect to operational responsibilities 
for government information dissemination, 
historically GPO and national libraries have 
had a primary role. However, as a result of the 
increasing volume of government informa¬ 
tion-in many cases mandated by statute- 
coupled with the transition to electronic sys¬ 
tems, NTIS and several of the agencies also 
have become major disseminators of govern¬ 
ment information. GPO, NTIS, the national 
libraries, and several agencies have developed 
numerous electronic and computer-based in¬ 
formation products and services. For example, 
GPO makes the U.S. Code, Congressional Rec¬ 
ord, and Federal Register available in com¬ 
puter tape format to private publishers and 
information providers. Also, GPO makes its 
catalog to government publications available 
to depository libraries in an on-line electronic 
format. 


1 44 U. S.C. 3501 (2)(B) and (D). 


And NTIS has expanded far beyond paper 
or microfiche copies of printed reports to in¬ 
clude bibliographic, database, software, and 
related functions in cooperation with numer¬ 
ous other Federal agencies. These NTIS activ¬ 
ities include, for example: 

• computer software-more than 500 soft¬ 
ware programs, from more than 100 Fed¬ 
eral agencies, available for purchase in 
magnetic computer tape format; 

• energy software-more than 730 pro¬ 
grams available for purchase in coopera¬ 
tion with the Department of Energy Na¬ 
tional Energy Software Center; 

• computerized data files-about 1,000 data 
files are available in computer tape 
format; 

• floppy diskette fi I es-about 60 fi les avai I- 
able in diskette format (also, any comput¬ 
erized data file can be converted): 

• energy modeling programs-about 55 
computer modeling programs available on 
computer tape; and 

• other databases—from the Defense Logis¬ 
tics Supply Center, Human Nutrition In¬ 
formation Service (USDA), and National 
Center for Health Statistics (DHHS). 

In 1979 an advisory group appointed by the 
J oint Committee on Printing considered the 
possibility of establishing a new central office 
combining the functions of GPO, NTIS, and 
OMB with respect to public information poli¬ 
cy, in order to facilitate public access and elim¬ 
inate duplication. A National Publications Act 
of 1980 was introduced to establish a National 
Publications Office along with a commission 
that would replace the J oint Committee, but 
the bill was not enacted. 44 


“See Levin. “Access and Dissemination Issues, ” op. cit., 
pp. 129-130; U.S. Congress, Joint Committee on Printing, Ad 
Hoc Advisory Committee on Revision of Title 44, Federal Gov¬ 
ernment Printing and Publishing: Policy issues, Washington, 
DC, 1979; and “National Publications Act of 1980, ” 96th Cong., 
2d sess. 
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Public Information Index 
or Clearinghouse 

Whether or not Congress establishes a cen¬ 
tralized public information office, a centralized 
index to or clearinghouse of government infor¬ 
mation could be setup and operated by an ex¬ 
isting or new entity. The library community 
has strongly advocated the need for such an 
index or clearinghouse, given the very large 
amount, numerous types, and many locations 
of government information. 

One specific opportunity that has not been 
fully realized is the further development of the 
Federal Information Locater System (FILS) 
(or the equivalent) into a government wide elec¬ 
tronic directory of public information prod¬ 
ucts—both electronic- and paper-based. In en¬ 
acting the Paperwork Reduction Act of 1980, 
Congress specifically required OMB to estab¬ 
lish FILS and develop a proposal to augment 
it to include data profiles of all major agency 
information holdings. 45 The U.S. Senate report 
accompanying the act states that FILS is to: 46 

1. identify duplication in agencies' reporting 
and recordkeeping requirements; 

2. locate existing information that may meet 
the needs of Congress, executive agencies, 
and the public; and 

3. assist in deciding which agency requests 
for information collection should be ap¬ 
proved. 

FILS is now operational, but is designed and 
used primarily for #1 above, secondarily for 
#3, and not at all for A National Bureau 
of Standards study (sponsored by OMB) of 
possible FILS improvements has been com¬ 
pleted, but did not address objective #2 .. 47 

The further development of FILS or the 
equivalent should be able to build, to some ex¬ 
tent, on the prior work of the many agencies 
that have a directory or catalog of their own 
public information products. Indeed, 67 out 


‘ Public Law 96-51 1; Section 3505 (2)(B) and (D). 

"S. Rep. No. 96-930. p. 2. 

t-u. s. Department of Commerce, National Bureau of Stand¬ 
ards, Recommendations for the I improvement of the Federal 
Information Locator System, October 1984. 


of 119 agencies (or 56 percent) responding to 
the OTA Federal Agency Data Request indi¬ 
cated the existence of a directory or catalog, 
and this included almost all of the largest pub¬ 
lic information providers (e.g., Census, NTIS, 
NCHS, Energy Information Administration 
(EIA), U.S. Geological Survey, and the Nation¬ 
al I nstitute of J ustice). 

The directories are mostly in a paper format, 
although some agencies also have or contract 
for computerized bibliographic services, and 
many agency reports and documents are in¬ 
dexed in various government and commercial 
on-line information retrieval systems. For ex¬ 
ample, GAO publishes a directory titled Fed- 
eral Information Sources and Systems that is 
available in paper format and on the SCORPIO 
(Library of Congress) information retrieval 
system.^And a private publisher produces 
The Computer Data and Database Source 
Book in both hardcopy and electronic format 
(the latter via NewsNet). 49 

Mechanisms for Exchange of 
Learning and Innovation 

Despite the activities of various individual 
Federal agencies, there appears to be no effec¬ 
tive governmentwide mechanism to exchange 
learning and take advantage of the full range 
of innovative opportunities presented by in¬ 
formation technology to facilitate access to 
and dissemination of public information. 

The public information area appears to have 
received relatively little attention from the 
central agencies for information technology 
management—OM B, NBS, and GSA. There 
is little evidence of an organized effort to share 
experience and learning across agency lines, 
and to help derive the most benefit from agen¬ 
cy experiments with and innovative applica¬ 
tions of information technology for public in¬ 
formation purposes. One or more of the central 
agencies could take on a larger role in this area, 


"U.S.Comptroller General, Federal Information Sources 
and Systems 1984, GAO/AFMD-85-3, General Accounting 
Office. 

‘“MatthewDesko, The Computer Data and Database 
Source Book (New York: Avon, 1984). 
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and/or some other agency or agencies whose 
primary mission is public information (e.g., the 
Bureau of Labor Statistics, El A, GPO, NTIS) 
could be asked to serve as a focal point for the 
exchange of learning and innovation. 

Several examples of agency innovation have 
been cited previously. Two others include 
TradeNet and the Microcomputer Electronic 
Information Exchange. TradeNet is a comput¬ 
er-based electronic network that includes data¬ 
bases, analytic software, electronic mail, and 
other automated capabilities with respect to 
information relevant to international trade pol¬ 
icy. Several agencies (e.g., the Office of the 
U.S. Trade Representative; Departments of 
Agriculture, Commerce, and Labor) pooled re¬ 
sources to develop a more accurate and timely 
information base on trade policy—drawing 
from U.S. Government, international, and pri¬ 
vate sector sources. TradeNet's central files 
are maintained at the N ational I nstitutes of 
Health computer center, and files are accessed 
electronically in real-time or by downloading 
to mini- and micro-computers. 50 Another ap¬ 
proach is the electronic bulletin board, illus¬ 
trated by the Microcomputer Electronic Infor¬ 
mation Exchange, operated by NBS. This is 
a public bulletin board that provides informa¬ 
tion on microcomputer: courses, access to 
other bulletin boards, user groups and meet¬ 
ings, security products and issues, and tech¬ 
nical information, among other topics. 51 

Some technological opportunities that do 
not, as yet, appear to be receiving very much 
governmentwide attention include: remote 
electronic printing and printing-on-demand for 
dissemination of government reports to the 
public; computer-assisted surveys and data 
collection for statistical purposes; videotex (or 
the equivalent) information systems net¬ 
worked with depository and public libraries; 
and microcomputer-based systems for individ¬ 
ual access to the major public information 
databases. 

•' Harry Goldberg, “TradeNet: Enhanced Accuracy & Econ¬ 
omy Result From Interagency Data Pooling, Government Ex¬ 
ecutive, vol. 17, No. 1, January 1985. 

'For more information, the dial-up number is (301) 948* 
5718 (ASCII, 1200 baud, 8 or 7 data bits, even or no parity, 
1 stopbit). 


The Canadian Government's nationwide 
videotex-based public information system is 
one example of what is technically feasible. 
More than 2,000 videotex terminals have been 
located in government agencies, libraries, and 
other public places. A wide variety of infor¬ 
mation is available-ranging from a nation¬ 
wide job bank, weather forecasts, and national 
park services to the status of bills in Parlia¬ 
ment. The public has free access at public 
buildings (e.g., libraries, post offices), and can, 
for a fee, gain access via personal computers." 
Another example is a recently launched Euro¬ 
pean electronic publishing program that is 
aimed at providing a complete service for the 
electronic storage, transmission, and delivery 
of documents. This program is being run by 
a group of publishers, software houses, com¬ 
puter service bureaus, and governmental en¬ 
tities. Technologies include user-friendly vid¬ 
eotex, digital optical disks, high-speed tele¬ 
copy, and satellite transmission. 53 

Freedom of Information Act 
I mplementation 

OTA found that very few Federal agencies 
are directly using information technology to 
facilitate the processing of FOIA requests, 
and the results of these few applications are 
not being effectively shared. Possible oppor¬ 
tunities for innovation are neither being stud¬ 
ied nor tested. 

The response to the OTA Federal Agency 
Data Request indicated that few agencies re¬ 
ceive or respond to FOIA requests in electron¬ 
ic form. A handful of agencies are just begin¬ 
ning to consider the possibilities, although 


-“Canada Sets Pace in Making Government Accessible to 
All, ” Government Executive, February 1985. pp. 37-41. 

“’European Electronic Publishing Program, ” Information 
Hotline, February 1985. p. 4. See also, for discussion of pro¬ 
posals for U.S. innovations. National Commission on Librar¬ 
ies and Information Science and U.S. Department of Agricul¬ 
ture,/ oint Congressional Hearing on the Changing Information 
Needs of Rural America: The Role of Libraries and Informa¬ 
tion Technology, July 21, 1982; National Commission on Li¬ 
braries and Information Science, Communist.}' information and 
Referral Services, May 1983; and U.S. Congress, Joint Com¬ 
mittee on Printing. Provision of Federal Government Publica¬ 
tions in Electronic Format to Depository Libraries, 98th Cong., 
2d sess.. 1984. 
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only one agency (the Federal Aviation Admin¬ 
istration) reported a completed, ongoing, or 
planned formal study on this topic. 

Some agencies are using computerized sys¬ 
tems to improve the internal tracking and 
processing of FOIA requests, with apparently 
good results. Other agencies recognize that 
computerized records can, in general, speed up 
processing time. However, these positive ex¬ 
periences do not appear to be shared effective¬ 
ly with other agencies. 

Beyond this, however, several States appear 
to be ahead of the Federal Government in their 
consideration of electronic public access to 
government information. For example, the 
State of California commissioned a study on 
electronic public access that concluded that: 

The opportunities [of direct electronic ac¬ 
cess] revolve around the possibility of mak¬ 
ing government—particularly the records of 
government- more readily accessible to the 
people of California. On-line inquiry, when 
coupled with powerful computerized file search 
capabilities, creates the possibility of employ¬ 
ing public information as a true public re¬ 
source, accessible to a much larger segment 
of the population than was possible in the 
past. 54 

However, the study also identified a number 
of issues that needed resolution, including: 1) 
meeting the public's right to know while pro¬ 
tecting the individual's right to privacy, 2) en¬ 
suring the proprietary rights of individuals 
and commercial enterprises, 3) providing ade¬ 
quate security, and 4) establishing fair and 
equitable prices. 

A similar study was conducted by the Flor¬ 
ida State Legislature's] oint Committee on In¬ 
formation Technology Resources. This study 
examined a wide range of issues raised by 
proposals to permit direct computer access to 


,4 State of California, Department of Finance, Office of In¬ 
formation Technology, “Accessing California State Data Bases: 
A Preface to ‘Framework to Develop Computer Information 
Public Access Policy, ’ “ Dec. 26, 1984; see generally, Touche 
Ross & Co. and EDP Audit Controls, Inc., F rams/vork To De¬ 
velop Computer I information Public Access Policy, prepared for 
the Office of Information Technology, California State Depart¬ 
ment of Finance, Jan. 1, 1985. 


public records. The J oint Committee found 
that the majority of Florida's State public rec¬ 
ord systems had been automated, and recom¬ 
mended, among other things, that: 

• remote electronic access to automated in¬ 
formation systems maintained by public 
record custodians should be authorized by 
statute and encouraged as a matter of 
public policy; 

• a pilot project demonstrating remote elec¬ 
tronic access to State automated records 
should be undertaken; 

• public record custodians should be al¬ 
lowed to charge for costs of computer 
time in fulfilling requests for copies of 
public records, but only after uniform cost 
methodologies are established in statute 
and rules; and 

• access to all State data systems should 
be made available to elected members of 
the Florida Legislature. 55 

Florida's analysis, as did California's, recog¬ 
nized the need to consider Privacy and Pub¬ 
lic Records (or Freedom of Information) laws; 
security, training, and cost recovery issues; 
technical concerns; responsibility for record 
quality and archiving; and the broader impli¬ 
cations for citizen participation in government 
when formulating policy on electronic access. 

An emerging issue identified in OTA's re¬ 
view of innovative activities in selected States 
(Michigan, Virginia, Oregon, and North Caro¬ 
lina, in addition to California and Florida) is 
the extent to which public records or data¬ 
bases, when computerized in an on-line format, 
become legally accessible to the public-re¬ 
gardless of whether or not such information 
is already provided by private vendors. For ex¬ 
ample, public access advocates argue that once 
government agencies computerize information 
on scheduling of public meetings and hearings, 
minutes and proceedings resulting from pub¬ 
lic activities, current status of regulatory and 

"State of Florida, Legislature, Joint Committee on Infor¬ 
mation Technology Resources. Remote Computer Access to 
Public Records in Florida, January 1985. Also see Donna Rai¬ 
mondi, “Florida Bill Proposes Electronic Access Into Agen¬ 
cies, ” Computerworld, Apr. 1, 1985, p. 19. 



155 


legislative initiatives, and the like, this elec¬ 
tronic information should be accessible to the 
public-at little or no cost." 

The selected State review (plus a review of 
activities in selected localities-Lane County, 
Oregon: Columbus, Ohio; and Beverly Hills, 
Irvine, Pales Verdes, and Buena Park, Cali¬ 
fornia) concluded that the two information 
technology applications with the greatest real 
potential for facilitating public access are: 

1. electronic access to information about the 
process and results of government activ¬ 
ities, especially decisionmaking activities; 
and 

2. access to the databases and computer 
models used by government agencies to 
formulate positions on various sides of the 
issues .57 

The review identified a wide range of techni¬ 
cal options—from cable television and video¬ 
tex to microcomputer access over electronic 
data networks-but concluded on a note of 
caution. Many past expectations about using 
information technology to facilitate public ac¬ 
cess have not been met—someti mes due to 
lack of citizen interest and sometimes because 
the groups using the new electronic options 
are those that already have the resources and 
sophistication to get access now, among other 
factors. In sum, information technology ap¬ 
pears to offer significant potential to facilitate 
implementation of public records and freedom 
of information laws—whether at the Federal, 
State, or local levels. But realizing this poten¬ 
tial depends in large part on an interested and 
educated citizenry and the absence of any sig¬ 
nificant technical or cost barriers. 58 


'See generally Kenneth L. Kraemer, John Leslie King, and 
David G. Schetter, Innovative Use of Information Technology 
in Facilitating Public Access to Agency Decisionmaking: An 
Assessment of the Experience in State and Local Governments, 
OTA contractor report, March 1985. 

‘-Ibid., pp. 44-49. 

•Ibid.; also see, for example, Bruce Gates, “Knowledge, 
Networks, and Neighborhoods: Will Microcomputers Make Us 
Better Citizens?” Public Administration Ra/ie/V, March 1984, 
pp. 164-169; and William Dutton, et al., “Electronic Participa¬ 
tion by Citizens in U.S. Local Government, ” I nformation Age, 
April 1984, pp. 78-97. For some of the earliest work on this topic, 
see John D.C. Little, Thomas B. Sheridan, Chandler H. Stevens, 
and Peter Tropp, Citizen Feedback Components and Systems 
(Cambridge, MA: MIT, June 1972); Norman Johnson and Ed- 


Electronic Recordkeeping and 
Archiving 

The growing use of information technology 
in the creation and maintenance of Federal rec¬ 
ords could have a profound effect on the re¬ 
corded history of Federal programs and deci¬ 
sions, and thus could affect the record base 
subject to the FOIA in particular and public 
access in general. If key Federal records were 
electronically erased or destroyed, the FOIA 
and public access mechanisms, however strong, 
would be undermined. 

The increase in computerized files, but most 
significantly the explosion in microcomputer 
and word processing terminals, means that 
record creation and recordkeeping have been 
decentralized. File clerks and secretaries no 
longer have clear physical control over records 
management. Agency staff who use word proc¬ 
essing software are able to create, manipulate, 
file, review, delete, and communicate docu¬ 
ments. If those documents meet the definition 
of Federal records, then legally these records 
should be retained to preserve the documen¬ 
tation for different steps in the decisionmak¬ 
ing process. 

Record managers, researchers, historians, 
and archivists are properly concerned that key 
Federal records may be lost, altered, or de¬ 
stroyed by agency staff who do not under¬ 
stand Federal record management require¬ 
ments. The National Archives and Records 
Administration (NARA), GSA, and Senate 
Historical Office, among others, have pointed 
out the need to develop educational, training, 
technical, and policy strategies to deal with 
this potential problem. These agencies have 
emphasized that now is the time to address 


ward Ward, ' ‘Citizen Information Systems: Using Technology 
To Extend the Dialogue Between Citizens and Their Govern- 
merit, ” Management Science, December 1972, pp. p-21 to p-34; 
Chandler Harrison Stevens, Floyd E. Barwig, Jr., and David 
S. Haviland, Feedback: An involvement Primer (Troy, NY: 
Rensselaer Polytechnic Institute, January 1974); Roy Amara, 
Toward Understanding the Social Impact of Computers (Menlo 
Park, CA: Institute for the Future, May 1974); and Fred B. 
Wood, “Congressional-Constituent Telecommunication: The Po¬ 
tential and Limitations of Emergent Channels,” IEEE Trans¬ 
actions on Communications, vol. 23, No. 10, October 1975, pp. 
1134-1142. 
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these questions while Federal agencies and em¬ 
ployees are still learning about, and develop¬ 
ing policies and procedures for, microcomputer 
use. 

As a result, IMARA and GSA recently issued 
preliminary guidelines for agencies regarding 
electronic recordkeeping, and have initiated 
major projects to further research the records 
management problems presented by the cre¬ 
ation, maintenance, use, and disposition of 
electronic records. The wide scope of concern 
is illustrated by the topics covered in the pre¬ 
liminary bulletin: 

• electronic records creation practices, 

• indexing electronic records, 

• retrieval of electronically stored records, 

• ensuring the retention of electronic 
records, 

• destruction of electronic records, 

• electronic record standards, 

• judicial use of electronic records, 

• appropriate electronic records storage 
medium, 

• electronic records security, 

• software for electronic record systems, 

• equipment configuration for electronic 
record systems, and 

• flexible disk care and handling for elec¬ 
tronic records. 59 

The magnitude of the problem is reflected 
in the following statement by a senior NARA 
official in explaining why and how the govern¬ 
ment could lose a significant portion of its in¬ 
stitutional memory: 

The impact of automation is broad ranging, 
Program and policy officials, sitting at their 
terminals, decide the fate of the information 
they create and receive, while in the past peo¬ 
ple trained in records management made 
these decisions. With the use of paper, the de¬ 
velopment of policies was simple to trace. 
Successive drafts indicated the evolution of 
decisions. With computers, though, drafts no 
longer exist. Instead, policy papers evolve 
and each new version is written over the pre¬ 
vious one. With paper files, most people ap- 


r “U.S. General Services Administration, FIRMR Bulletin 
23 on “Electronic Recordkeeping, ” June 18, 1985. 


predated the need for a coherent, centralized 
filing system. The increased use of automa¬ 
tion masks this need and individuals develop 
personalized retrieval systems, many of 
which would be incomprehensible to anyone 
else. 60 

Finally, the Acting Archivist of the United 
States has raised a serious concern that elec¬ 
tronic recordkeeping may undermine aspects 
of the Privacy Act with respect to the currency 
and accuracy of Privacy Act records and their 
disposition. For example, electronic records 
may be destroyed too quickly before the rec¬ 
ord subject can, if he or she desires, check the 
record quality, or may be retained too long, 
and become stale and outdated. The Archivist 
believes that, while most records officers now 
agree that electronic records are fully subject 
to the Federal Records Act and other relevant 
public laws, many records managers need ad¬ 
ditional training and motivation-as well as 
guidance-in order to develop appropriate elec¬ 
tronic records management programs. 61 

In sum, leading government historians and 
archivists believe that the United States is in 
danger of losing its memory, "and that histori¬ 
cally significant first drafts of key policy doc¬ 
uments may be lost. " Thus "[bjecause of era¬ 
sures of electronic records, future historians 
may know less about the 1985 arms control 
talks than about the 1972 Strategic Arms 
Limitations Talks. " 62 

Scientific and Technical Information 

Scientific and technical information (STI) 
collected and/or developed at Federal Govern¬ 
ment expense is an important subset of all 
government information. The role of informa¬ 
tion technology has aggravated some old is¬ 
sues and raised some new ones. On the posi¬ 
tive side, electronic STI systems have now 
become a significant, if not indispensable, part 
of the scientific research and engineering en- 


'"Patricia Aronsson, Director, NARA Documentation 
Standards Division, letter to Fred Wood of OTA, Apr. 9, 1985. 
«i Frank G. Burke, Acting Archivist of the United States, 

letter to Fred Wood of OTA, Oct. 4, 1985. 

“Mitch Betts, “Federal Historians Alarmed at Loss of 
Computerized Data, ” Computerworld, Sept. 23, 1985, p. 34. 
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terprise in the United States and other tech¬ 
nologically advanced nations. Computerized 
bibliographic and information retrieval sys¬ 
tems are commonplace, as are various forms 
of computer networking—up to and including 
supercomputer networks. The use of electronic 
mail, electronic bulletin boards, and computer¬ 
conferencing is growing, although still at very 
modest levels. These technologies present fur¬ 
ther opportunities for innovation. 63 

On the negative side, She U.S. science and 
engineering community appears to be so de¬ 
pendent on information technology to retain 
a competitive edge that any reductions (or 
even reduced growth) in this technological sup¬ 
port are viewed with serious concern, especial¬ 
ly in the university research community. The 
issues discussed earlier with respect to pub¬ 
lic information generally (e.g., greater empha¬ 
sis on private sector commercial offerings and 
full cost recovery) may actually be even more 
salient in the university research community, 
in part because of the high percentage of Fed¬ 
eral financial support for university research 
and development. 64 

Commercialization of scientific and techni¬ 
cal data is a continuing issue. A strongly held 
view in the scientific community is that the 
best research results from full and open com¬ 
munication and easy availability of the latest 
data and research findings. A good example 
is the debate over the Landsat Earth remote¬ 
sensing satellite program. Congress ultimately 
decided to transfer this program to the private 
sector for commercial development, over the 
objections of some researchers who felt that 


*• ‘See Jane Bortnick and Nancy Miller, The Impact of Infor¬ 
mation Technology on Science, Congressional Research Serv¬ 
ice, Library of Congress, July 1985, especially sections II and 
III; and, generally, U.S. Congress, Office of Technology Assess¬ 
ment, Information Technology R&D: Critical Trends and Is¬ 
sues, OTA-CIT-268 (Washington, DC: U.S. Government Print¬ 
ing Office, February 1985). For a detailed discussion of one 
Federal agency’s technical information activities, see U.S. De¬ 
partment of Energy, Office of Scientific and Technical Infor¬ 
mation, “Technical Information Management Activities: What 
They Are and How They Relate to and Support the DOE R&D 
Programs” (Oak Ridge, TN: August 1985). 

M See Bortnick and Miller information Technology, op. cit., 
esp. pp. 39-41, 57-60; and Patricia Battin, “Problem Trends in 
the Information Marketplace, ” Chronicle of I nternational Com¬ 
munication, September-October 1985, pp. 5-6. 


this valuable source of data might be priced 
out of reach if placed in a private firm. 65 This 
same concern has been expressed about a num¬ 
ber of STI systems, such as the Environmen¬ 
tal Protection Agency's transfer of its chemi¬ 
cal information system (known as CIS) to 
private vendors. 66 

Overall, all of the trends, issues, and oppor¬ 
tunities discussed previously with respect to 
public information generally appear to apply 
to STI, with the further complicating factor 
of national security. Classified information is, 
of course, exempted from disclosure under 
FOIA and is not public information. The prob¬ 
lem with STI is striking the appropriate bal¬ 
ance between adequate protection for sensitive 
STI, on the one hand, and open and broad dis¬ 
semination of STI among the research com¬ 
munity, on the other. This involves, in part, 
concern about overclassification, but more im¬ 
portantly that unclassified STI may be re¬ 
stricted due to its possible use in ways that 
could affect national security. The tensions be¬ 
tween open scientific exchange and tight mil¬ 
itary control of STI have heightened in recent 
years, in part because of information technol¬ 
ogy and the vastly increased speed, content, 
and complexity of electronic STI networks. 
Numerous professional and technical organi¬ 
zations have heavily resisted DOD efforts to 
curtail the exchange of STI. This issue is likely 
to continue for the foreseeable future. 67 


’’ Ibid.; U.S. National Commission on Libraries and Infor¬ 
mation Science, Information Policy Implications of Archiving 
Satellite Data: To Preserve the Sense of Earth From Space, 
Washington, DC. 1984; and U.S. Congress, Office of Technol¬ 
ogy Assessment, Remote Sensing and the Private Sector: Is¬ 
sues for Discussion—A Technical Memorandum, OTA-TM-ISC- 
20 (Washington, DC: U.S. Government Printing Office, March 
1984). Also see statements of witnesses at Nov. 13, 1985. hear¬ 
ing on "Oversight of Landsat Commercialization, held by the 
U.S. Senate, Committee on Commerce, Science and Transpor¬ 
tation, Subcommittee on Science, Technology, and Space. 

“Jeffrey L. Fox, "EPA Dumps Chemical Data System'" 
Science, vol. 226, November 1984, p. 816. 

“■SeeBortnick and Miller. Information Technology, op. cit., 
pp. 57-60; also Mitchel B. Wallerstein, “Scientific Communi¬ 
cation and National Security in 1984, Science, vol. 224, May 
4, 1984, pp. 460-466; Harold C. Relyea,“National Security Con¬ 
trols and Scientific Information, ” Congressional Research Serv¬ 
ice, Library of Congress, Issue Brief 82083, Sept. II, 198-1; Rob¬ 
ert L. Park, "Restrictions on Scientific Freedom, ” IEEE 
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Other Issues 

OTA identified four other issues that war¬ 
rant attention. These are described briefly 
below: 

1. Transborder information flow. Variations 
in national laws and policies on informa¬ 
tion may restrict the free flow of informa¬ 
tion between nations, and curtail interna¬ 
tional market opportunities for U.S. firms. 
On the other hand, information technol¬ 
ogy permits a vastly expanded range of 
technical options for international (or 
transborder) information flow. 68 

2. Depository library system. The deposi¬ 
tory library system is viewed by some as 
part of the public information "lifeline" 
or "safety net" to ensure that the public 
has at least one avenue of unrestricted ac¬ 
cess. Some researchers have questioned 
how much government information actu¬ 
ally gets into the depository libraries, and 
to what extent the public is aware of and 
uses the libraries. Modern electronic in¬ 
formation technologies are already impor¬ 
tant to the depository system, and are 
opening up many new opportunities. 69 


Technology and Society Magazine, March 1985. pp. 7-9; Eric 
J. Lerner, “DOD Information Curbs Spread Fear and Confu¬ 
sion, ” Aerospace, March 1985. pp. 76-80; and “Societies Warn 
Defense Department of ‘Counterproductive' Information Con¬ 
trols,” The IEEE Institute, November 1985, pp. 1, 4. 

“"See, for example, LINK Resources Corp. and Transna¬ 
tional Data Reporting Service, Inc., Strategic Response to Reg¬ 
ulation of Transnational Data Flows. Na/v York, 1979. 

“See U.S. Congress, loint Committee on printing. Provi¬ 
sion of Federal Government Publications in Electronic Format 
to Depository Libraries, report of the Ad Hoc Committee on 
Depository Library Access to Federal Automated Data Bases, 
Washington, DC. 1984; Peter Hernon, “Provision of Federal 
Government Publications in Electronic Format to Depository 
Libraries, ” Government I nformation Quarterly, vol. 2, No. 3, 
1985; pp. 231-234; U.S. Congress, Joint Committee on Print¬ 
ing, An Open Forum on the Provision of Electronic Federal In¬ 
formation to Repository Libraries, Report of the Committee 
Staff, 99th Cong.,lstsess., June 26, 1985; and Sarah Kadec, 
“The U.S. Government Printing Office’s Library Program’s 
Service and Automation: An Insider's Commentary, ” Govern¬ 
ment Publications Review, vol. 12, 1985, pp. 283-288. 


3. Federal statistical system. Federal statis¬ 
tical agencies are among the major Fed¬ 
eral Government public information pro¬ 
viders; their activities are relevant to all 
of the issues previously discussed. How¬ 
ever, the statistical community has, over 
the last 5 years, raised questions about 
the proper development and coordination 
of Federal statistical policy, the impact 
of budgetary cuts and restrictions, and 
the appropriate role of electronic technol¬ 
ogy in the collection, maintenance, and 
dissemination of statistical information.™ 

4. Copyright protection. Although copy¬ 
right law prohibits the copyrighting of 
government information developed direct¬ 
ly by government agencies, there contin¬ 
ues to be concern about the status of in¬ 
formation developed by government con¬ 
tractors, for example, those conducting 
research and development. Also, the legal¬ 
ity and propriety of Federal agencies giv¬ 
ing private vendors exclusive control over 
or rights to agency information have been 
questioned, as has the implicit control re¬ 
sulting from exclusionary pricing (e.g., 
pricing at a level that only trade associa¬ 
tions, law firms, and business can afford 
and not most individual citizens, research¬ 
ers, and public interest groups). It is not 
clear whether technology is part of the 
problem, part of the solution, or both. 71 


See U.S. General Accounting Office, Status of the Statis¬ 
tical Community After Sustaining Budget Reductions, GAO / 
IMTEC-84-17, July 18. 1984; U.S. Congress, House Commit¬ 
tee on Government Operations, The Federal Statistical System, 
1980 to 1984, 98th Cong., 2d sess., a report prepared by Base¬ 
line Data Corp. for the Congressional Research Service, Novem¬ 
ber 1984; and U.S. Congress, House Committee on Government 
Operations, An Update of the Status of Major Federal Statis¬ 
tical Agencies, Fiscal Year 1986, 99th Cong.,lstsess., May 
1985. 

‘For general discussion of copyright and other intellectual 
property issues, see OTA ,Intellectual Property Rights in an 
Age of Electronics and Information, forthcoming in late 1986. 
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Chapter 8 

Information Technology and 
Congressional Oversight 


SUMMARY 


The preceding chapters of this report focus 
primarily on management, use, and congres¬ 
sional oversight of information technology in 
the executive branch. The trends, issues, and 
options discussed are properly within the pur¬ 
view of congressional oversight of executive 
branch programs, activities, and implementa¬ 
tion of public laws. However, information tech¬ 
nology also has a potential role in the actual 
conduct of congressional oversight. 

Over the last 10 to 15 years, Congress as a 
whole has made great strides in using infor¬ 
mation technology with respect to legislative 
information retrieval, constituent mail, corre¬ 
spondence management, and some administra¬ 
tive functions. For example, Members of Con¬ 
gress and congressional staff now have access 
to a wide range of computer-based services, 
such as computerized tracking of current bills 
and amendments; and computerized biblio¬ 
graphic databases and legal information re¬ 
trieval systems, some operated by Congress 
and others by private vendors. There are now 
several thousand computer terminals in Con¬ 
gress, compared to only a handful in 1970. 
Also, both the House and Senate now have 
well-developed information technology sup¬ 
port offices. 

However, the use of information technology 
for direct support of congressional policymak¬ 
ing and oversight is just beginning. A simi¬ 
lar situation exists at the State level, based 
on an OTA review of relevant activities in nine 
State legislatures (California, New York, Wis¬ 
consin, Minnesota, Florida, Washington, Tex¬ 
as, Virginia, and South Dakota). The devel¬ 
opment of legislative information technology 
appears to follow a common pattern where pol¬ 
icymaking and oversight applications follow, 
rather than lead, basic administrative, cor¬ 


respondence, and information retrieval appli¬ 
cations. 

OTA identified significant unrealized oppor¬ 
tunities for congressional use of information 
technology in conducting oversight, and an ap¬ 
parent lack of clear strategy for such use. Four 
specific opportunities identified by OTA in¬ 
clude: 1) direct access by congressional com¬ 
mittees and staff to agency electronic files and 
databases, 2) use of computer-based modeling 
and decision support, 3) video- and computer¬ 
conferencing to augment committee and staff 
oversight activities, and 4) electronic tracking 
of agency and executive actions. Congress 
may wish to plan and conduct a series of pi¬ 
lot tests and demonstrations in each of these 
areas in order to more accurately assess the 
benefits, costs, and problems. 

The pilot test approach has worked in the 
past for new technological applications in Con¬ 
gress. Pilot tests of congressional oversight 
applications should be useful to help familia¬ 
rize Members and staff with new applications, 
identify needs for training, and develop the 
best match or fit between a particular appli¬ 
cation and the needs of specific committees, 
Members, and staff. Also, while Congress has 
strong constitutional powers to oversee and 
obtain information from the executive branch, 
pilot tests would help familiarize the agencies 
with new applications, identify any needed ad¬ 
justments, and generally seek approaches that 
minimize possible concerns about separation 
of powers and executive privilege. 

Numerous alternatives for implementing 
pilot tests are available to Congress, ranging 
all the way from accessing carefully selected 
agency databases in specific subject areas; to 
requesting that selected agency submissions 
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to Congress be presented in a decision analytic 
framework; to running-on a trial basis-illus¬ 
trative agency decision support models with 
alternative assumptions and data; to estab¬ 
lishing a pilot congressional "situation room" 
for oversight purposes. Several of the options 
discussed previously in chapters 6 and 7 could 


also be helpful in the use of information tech¬ 
nology for congressional oversight, such as 
guidelines on model evaluation, procedures for 
monitoring and exchanging key trends infor¬ 
mation, and directories or indices to major 
databases and computer models. 


INTRODUCTION 


Previous chapters of this report have fo¬ 
cused primarily on the management and use 
of information technology by the executive 
branch of the Federal Government, and in par¬ 
ticular those trends, applications, opportuni¬ 
ties, and issues that warrant congressional at¬ 
tention. The prior chapters deal largely with 
appropriate substantive topics for congres¬ 
sional oversight of Federal Government infor¬ 
mation technology. This chapter deals with 
the use of information technology in the proc¬ 
ess of conducting congressional oversight. 

Congressional applications of information 
technology span the spectrum from correspon¬ 
dence management and computerized mail, 
to electronic voting, to computerized biblio¬ 
graphic searches and information retrieval. 
Congressional use of information technology 
can have implications in a variety of areas— 
ranging from the efficiency, working condi¬ 
tions, and organizational structure of Con¬ 
gress; to the legislative, investigative, and con¬ 
stituent service functions of Congress; to the 
political effectiveness of Congress in represent¬ 
ing the diverse interests of this Nation; and, 
finally, to the quality of the public policy¬ 
making process and the power of Congress rel¬ 
ative to other branches and levels of gov¬ 
ernment. 1 


'For further discussion, see Stephen E. Frantzich, “Con¬ 
gressional Applications of Information Technology, ” OTA con- 


This chapter focuses on only a few aspects 
of congressional use of information technol¬ 
ogy-sped fi call y, the current and potential 
use of information technology in conducting 
congressional oversight of executive branch 
programs, activities, and implementation of 
public laws, as well as oversight of general so¬ 
cietal trends and issues that are relevant to 
the legislative process. 

This chapter first presents a brief review of 
the current status of information technology 
in Congress; and then discusses several unreal¬ 
ized opportunities for congressional use of in¬ 
formation technology in conducting oversight 
of executive branch agencies, programs, and 
activities. 


tractor report, February 1985; Robert L. Chartrand and Trudie 
A. Punaro, The Legislator As User of Information Technology, 
Congressional Research Service, Library of Congress, Report 
No. 84-170 S, Dec. 7, 1984; and Stephen E. Frantzich, Comput¬ 
ers in Congress: The Politics of I n formation (Beverly Hills, CA: 
Sage Publications, 1982). Also see Rex V. Brown, “A Brief Re¬ 
view of Executive Agency Uses of Personalized Decision Anal¬ 
ysis and Support, ” OTA contractor report, Mar. 14, 1985; and 
Rex V. Brown, “Decision Analysis As a Tool of Congress,” OTA 
contractor report, May 10, 1985. 
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Members of Congress and congressional 
staff now have access to a wide range of com¬ 
puter-based services, such as: 2 

• major issue briefs prepared by the Con¬ 
gressional Research Service (CRS) and 
available in on-line electronic format, on 
microfiche, in hard copy, and, selectively, 
on audiocassettes; 

• legislative information systems that allow 
computerized tracking of current bills and 
amendments by subject, sponsor, and 
number; 

• computerized bibliographic databases 
such as SCORPIO (operated by the Li¬ 
brary of Congress), which includes, for 
example, legislative history information 
and Congressional Record abstracts, and 
DIALOG (a commercial service operated 
by Lockheed), which provides access to 
numerous public and private databases; 
and 

• computerized legal information retrieval 
systems, such as LEXIS (a commercial 
service operated by Mead Data Central), 
which contains the U.S. Code and Su¬ 
preme Court and State Court decisions, 
and, where necessary, J URIS (J ustice Re¬ 
trieval and Inquiry System, operated by the 
U.S. Department of J ustice) and FLITE 
(Federal Legal Information Through Elec¬ 
tronics, operated by the U.S. Department 
of the Air Force). 

In addition, Congress makes extensive use 
of computerized mail, correspondence manage 
ment, scheduling, and administrative systems, 
use of electronic voting and televised floor 
proceedings (House only), and some use of elec- 


^Frantzieh, “Congressional Applications, ” op. cit.; and 
Chartrand and Punaro, The Legislator, op. cit. 


tronic mail and computer-based decision sup¬ 
port. Many congressional scholars now believe 
that Congress has, indeed, moved into the in¬ 
formation age. Political scientist Stephen E. 
Frantzich, of the U.S. Naval Academy, in a 
1985 paper on "Congressional Applications of 
Information Technology" prepared for the Of¬ 
fice of Technology Assessment, observes that: 

A decade ago, Congress stood in the back¬ 
waters of information technology applica¬ 
tions with little more than routine payroll 
uses of the computer. Congress' timidity to 
enter the "Information Age" has been re¬ 
placed by an aggressive desire to provide 
both the institution and its individual mem¬ 
bers with the sophisticated information tools 
available in other realms. 

Both the House and Senate have developed 
information support offices that provide a 
wide range of services and in-house consult¬ 
ing to Members and staffs. These responsibil¬ 
ities have been assigned in the House to the 
House Information Systems Office (HIS, with 
oversight by the House Administration Com¬ 
mittee) and in the Senate to the Senate Com¬ 
puter Center (operated by the Senate Sergeant 
of Arms with oversight by the Senate Rules 
and Administration Committee). Both HIS 
and the Senate Computer Center provide gen¬ 
eral technical assistance to Congress in such 
areas as: 

• designing and computerized processing of 
surveys; 

• facilitating access to econometric models; 

• developing custom computer models; 

• accessing computerized demographic and 
geographic data; 

• developing computer-assisted graphics 
for organizing and presenting informa¬ 
tion; 



164 


• using electronic spreadsheets and other 

computer software; and 

• accessing computerized statistical, budg¬ 

et, and programmatic data. 3 

In general, HIS and the Senate Computer 
Center make their technical expertise available 
to assist congressional committees in analyz¬ 
ing data needs; obtaining and utilizing data; 
directly accessing computer systems for proc¬ 
essing the data; and auditing and evaluating 
external computer systems and programs. 4 

Two other indicators document the move¬ 
ment of Congress into the computer age. There 
are now an estimated 7,500 computer termi¬ 
nals in Congress, compared to only a handful 
in 1970. 5 And the fiscal year 1983 legislative 
branch computer budget was about $73 mil¬ 
lion ($29 million for the House and Senate 
combined, the rest for congressional support 
offices), 6 compared to about $5 million in fis¬ 
cal 1970 (about $0.7 million for the House and 
Senate combined). 

Overall, modern information technology has 
become an indispensable part of the infrastruc¬ 
ture of Congress with respect to legislative, 
administrative, and constituent service func- 

'U. S. Library of Congress, Congressional Research Service, 
Congressional Oversight Manual, February 1984, pp. 104-107. 

'Ibid. 

'Steve Blakely. ' Computers Alter Way Congress Does Bus¬ 
iness, ” Congressional Quarterly. July 13, 1985, pp. 1379-1382. 

'Chartrand and Punaro, The Legislator, op. cit., p. 16. 


tions. However, the use of information tech¬ 
nology for direct support of policymaking and 
oversight is only just beginning. As noted by 
Robert L. Chartrand of CRS: 

The development of legislative information 
technology has followed a clear pattern. In 
almost every instance, the initial applications 
support legislative and internal administra¬ 
tive functions, such as voting, bill status, bill 
drafting and code revision, committee calen¬ 
dars, payrolls, office accounts and correspon¬ 
dence. Only after these initial systems have 
been successfully implemented do most legis¬ 
latures develop decision-making assisting 
and policy analysis applications. ’ 

The available evidence suggests that Con¬ 
gress is now roughly on a par with the State 
legislatures with respect to basic applications 
of information technology. A 1984 survey of 
State legislatures (conducted by the National 
Conference of State Legislatures) found that 
40 of 44 State legislatures responding had a 
computer system. States reported the follow¬ 
ing kinds of legislative applications: word 
processing (37 States); budget tracking (30); 
bill tracking (27); spreadsheet (23); graphics 
(22); editing (15); and audit tracking (7). 8 


7 Frantzich, “Congressional Applications, ” op. cit., p. 69. 
‘Dale Nesbury. “Legislative Fiscal Office Computer Sur¬ 
vey, ” National Conference of State Legislatures, Fiscal Affairs 
Program, July 12, 1981. 


OVERSIGHT OPPORTUNITIES 


OTA identified several specific opportuni¬ 
ties for congressional use of information tech¬ 
nology for oversight purposes, and an appar¬ 
ent lack of a clear strategy for such use. A 
similar situation exists at the State level, 
based on a review of relevant activities in nine 
State legislatures (California, New York, Wis¬ 
consin, Minnesota, Florida, Washington, Tex¬ 
as, Virginia, and South Dakota). 9 Despite scat¬ 


"Robert Miewald, Keith Mueller, and Robert Sittig, “State 
Legislature Use of Information Technology in Oversight, ” OTA 
contractor report, January 1985. 


tered examples of innovation, the selected 
State review concluded that: 

[W]ecertainly cannot say there is anywhere 
a thoughtful [State] legislative masterplan 
for greater oversight, augmented by the most 
modern means of information processing. In¬ 
formation technology has not been seized by 
the [State legislative] leadership as a major 
weapon in the ongoing struggle with the ex¬ 
ecutive branch. 10 


'"Ibid., p. 65 



165 


In Congress, there is already an awareness 
of the oversight potential of information tech¬ 
nology on the part of some staff and various 
Members who are among the leaders in using 
information technology .11 And in some subject 
areas, primarily budget analysis, the congres¬ 
sional use of electronic databases and comput¬ 
er modeling for oversight purposes is signifi¬ 
cant. 12 But there appears to be no overall 
strategy or plan for congressional use of in¬ 
formation technology for oversight. 

Four specific opportunities were identified 
by OTA: 1) access to agency electronic files; 
2 ) computer-based modeling and decision sup¬ 
port; 3) tide and computer-conferencing; and 
4) electronic tracking of agency and executive 
actions. Some pilot test possibilities are dis¬ 
cussed below. 

The discussion assumes that pilot tests and 
demonstrations would be conducted prior to 
full-scale implementation, in order to more ac¬ 
curately assess the benefits, costs, and prob¬ 
lems. The pilot test approach seems warranted 
in view of the potential sensitivities of both 
the overseers (committee members and staffs) 
and the subjects of oversight (primarily execu¬ 
tive branch agencies, programs, and officials, 
for purposes of this chapter). While Congress 
seems increasingly open to new applications 
of information technology, such applications 
need to be developed in ways that are compat¬ 
ible with the larger congressional process (e.g., 
hearings, investigations, legislative drafting) 
and with the skills and experience of Members 
and staff. Pilot tests would help familiarize 
members and staff with new applications, iden¬ 
tify any needs for training and work ou t the best 
match or fit between a particular application 
and the needs of specific committees, mem¬ 
bers, and staff. As for the executive branch 
agencies, while Congress has strong constitu- 


‘See Blakely, '‘Computers Alter, ” op. cit. Also see Edward 
Segal, “Computerizing Congress, ” PC World, November 1985, 
pp. 144-151. 

-Use of computer-based budget and economic analyses ap¬ 
pears to be concentrated in the Congressional Budget Office 
and House and Senate Budget Committees and in the Joint 
Committee on Taxation (which primarily serves the needs of 
the Senate Finance and 1 louse Ways and Means Committees). 


tional powers to oversee and obtain informa¬ 
tion from the agencies, some agency resistance 
and concern should be anticipated. Pilot tests 
would help familiarize the agencies with new 
applications, identify any needed adjustments 
or modifications, and generally seek approaches 
that minimize possible concerns about sepa¬ 
ration of powers, executive privilege, and con¬ 
gressional micromanagement. 

Also, the following discussion assumes that 
pilot tests would be preceded by some kind of 
preliminary study, and that the primary tech¬ 
nical support for pilot tests would be provided 
by the Senate Computer Center and House In¬ 
formation Systems staff, augmented where 
necessary by appropriate congressional com¬ 
mittee and/or congressional support office 
staff. Actually, a useful early activity might 
be to develop a roster of interested congres¬ 
sional staff and their relevant skills. These 
staff could then be drawn on as possible par¬ 
ticipants in and/or advisors or consultants to 
various pilot projects of interest. 

Access to Agency Electronic Files 

A central aspect of congressional oversight 
is access to and review of information relevant 
to agency implementation of public laws and 
programs. Congress has always sought over¬ 
sight information from the executive branch, 
and the constitutional power of Congress to 
obtain such information has, with few excep¬ 
tions, been upheld by the courts: 

• Indeed, "it is clear that official congres¬ 
sional committee requests for information 
are not subject to the disclosure restric¬ 
tions of the FOI/PA [Freedom of Infor¬ 
mation Act/Privacy Act], " 13 

• And more generally, "[a] broad power to 
investigate and oversee the execution of 
the laws has also been inferred from the 
constitutional grant of legislative power 
to the Congress. " 14 

■ 'Freedom of Information Act, 5U .S.C. 552(c), and Privacy 
Act, 5 U.S.C. 552a(b)(9). See Richard Ehlke, Congressional Ac¬ 
cess to information: Selected Problems and Issues, Congres¬ 
sional Research Service, Library of Congress, Report No. 79- 
220 A, p. 38. 

'■Ehlke,Ibid., p. 28. 
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• The Supreme Court has held that "the 
power to investigate is inherent in the 
power to make laws because '[a] legisla¬ 
tive body cannot legislate wisely or effec¬ 
tively in the absence of information re¬ 
specting the conditions which the legis¬ 
lation is intended to effect or change.' "Is 

Nonetheless, congressional requests for 
agency information are frequently met with 
delays and resistance. A key question is 
whether information technology can help im¬ 
prove congressional access. This OTA study 
has documented elsewhere that a high percent¬ 
age of agency files and record systems are now 
maintained in computerized form (see chs. 2 
and 7 of this report and ch. 2 of OTA's Elec¬ 
tronic Record Systems and Individual Priva¬ 
cy, forthcoming 1986). In theory, then, it 
should be quicker and easier for agencies to 
supply requested information in electronic 
rather than paper form, since all that would 
be necessary is making available a duplicate 
computer tape. Once received by Congress, the 
data on the computer tape could then be ma¬ 
nipulated and analyzed to meet the particu¬ 
lar needs of the congressional committees in¬ 
volved. 

This possibility has been borne out in at 
least two cases-one congressional application 
and one press application. The first is the 
transmittal of the President's budget on com¬ 
puter tape from the Office of Management and 
Budget (OMB) to the Congressional Budget 
Office (CBO). This has permitted CBO to be- 
gin its budget analyses sooner and prepare 
reports for Congress on a more timely basis. 16 
A second case, demonstrated by a former con¬ 
gressional staff person who is now an inves¬ 
tigative reporter for Knight-Ridder Newspapers, 
is access to computer tapes of agency data- 
in this case, data maintained by the Bureau 
of Motor Carrier Safety (BMCS, a part of the 
Federal Highway Administration) on truck ac¬ 
cident reports and safety investigations. 17 

1 'Ibid p. 29. which cites Eastland V. United States Service¬ 
men Fund, 421 U.S. 491, 504{ 1975), quoting McGrain v. 
Dougherty, 273 U.S. 135.175( 1927). Also see Nixon v. Admin¬ 
istrator of Genera) Services, 433 U.S. 425(1977). 

"Frantzich, “Congressional Applications, ” op. cit., p. 56, 
citing Robert Harris of the Congressional Budget Office. 

'Thomas J. Moore. Knight-Ridder Newspapers, telephone 
interview, Oct. 2,5, I9S5. 


Here, the reporter filed a Freedom of Infor¬ 
mation Act (FOIA) request for copies of the 
agency’s accident reports and safety inspec¬ 
tions, but asked that the records be provided 
on computer tape rather than on paper. The 
agency provided the requested records in com¬ 
puter format within 2 weeks, according to the 
reporter, much faster than the usual FOIA re¬ 
sponse time of several months or longer for re¬ 
quests of this large size. I n addition, the agen¬ 
cy was easily able to delete the names of truck 
drivers from the records, on the grounds of 
confidentiality, an exercise that would have 
been very time-consuming if done with paper 
records. Over 400,000 documents were pro¬ 
vided in electronic form and then analyzed 
using standard statistical software. The re¬ 
sults provided key input to a series of articles 
on the BMCS's implementation of truck safe¬ 
ty regulations and programs. 18 

Congressional requests for computerized 
agency records such as these are not subject 
to the FOIA. And, in general, the form of the 
record—whether paper or electronic—should 
make no difference with respect to the inher¬ 
ent congressional power to investigate and 
seek and obtain agency information. 19 Of 
course, agencies may resist anyway, as has 
happened on the State level in Vermont when 
the State legislature sought access to the ex¬ 
ecutive branch computerized financial ac¬ 
counting system. 20 

A logical first step would be for partici¬ 
pating congressional committees to review 
Federal agencies and programs within their 
jurisdiction and identify key types of informa¬ 
tion that are not presently available but would 
be useful to have in conducting oversight. The 
committees could then ask agencies whether 
they have the desired information and, if so, 
whether the information is computerized. 

'Ibid and see four-part series on "Deadly Transport: The 
Perils of Interstate Trucking" by Thomas J. Moore in the San 

Jose Mercury News: “Unsafe Trucks Endanger Nation’s High¬ 
ways, ” Apr. 21, 1985: “Truck Safety Is Industry’s Achille's 
Heel, ” Apr. 22, 1985: “U.S. Agency Puts Truckers on Easy 
Street. ” Apr. 23, 1985; and “U.S. Dodging Truck Safety Role, ” 
Apr. 24, 1985. 

'"Richard E hike, Legislative Attorney, American Law Divi¬ 
sion, Congressional Research Service, Library of Congress, tele¬ 
phone interview, Oct. 28, 1985. 

-’Dudley Clendinen, “New Computer Splits New Hamp¬ 
shire Officials. ‘ New York Times, date unknown. 
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Once the desired information has been iden¬ 
tified and located, the next logical step would 
be to review how the committee intends to use 
the information (e.g., what kinds of statisti¬ 
cal analyses are anticipated), and whether 
there is a significant advantage in providing 
the information to the committee directly in 
electronic form. Some information may not be 
suitable or usable for the purposes of the com¬ 
mittee and/or for electronic transfer. In some 
cases, it may be preferable for the agency to 
do the analysis itself and submit a written re¬ 
port to the committee, or perhaps the commit¬ 
tee will find that the agency has already car¬ 
ried out the desired analysis and need only 
provide a copy of an already existing report 
or other document. 

Where desired information exists and the 
committee wishes to do its own analysis (or 
double-check the agency’s work), then the rele¬ 
vant agency databases or files can be reviewed 
to ascertain the most cost-effective way to 
transfer the information—such as computer 
tape, computer disk or diskette, direct elec¬ 
tronic linkage, or a paper printout. The infor¬ 
mation would then be transferred from the 
agency computer to congressional comput¬ 
ers—probably either the mainframe computers 
i n the Senate Computer Center or H ouse I n- 
formation Systems Office and/or microcom¬ 
puters there or in committee offices. 

The results of a series of pilot tests should 
provide a basis for developing standardized 
software and analytical protocols for commit¬ 
tee access to computerized agency files and 
databases, and also help identify and resolve 
any procedural, legal, or jurisdictional issues 
that may arise. 

Another complementary action that com¬ 
mittees could take is requesting agencies 
within their jurisdiction to prepare and sub¬ 
mit a listing or directory of all (or selected by 
issue) major files and databases maintained 
and update the directory on a regular basis. 
Alternatively, agencies could be asked to par¬ 
ticipate in any governmentwide indices or di¬ 
rectories to agency databases that may be de¬ 
veloped (see related discussion in ch. 7). 


Computer-Based Modeling and 
Decision Support 

Both the House Information Systems Office 
and Senate Computer Center offer assistance 
to Congress with respect to use of decision 
support software (e.g., spreadsheet and ana¬ 
lytical packages) and the development and 
evaluation of computer models. However, use 
of these techniques appears to be quite limited, 
with the exception of economic and financial 
modeling. 

The primary current congressional use of 
modeling tools is in the budgetary process "for 
evaluating funding alternatives, analyzing tax 
structures, and forecasting revenues and ex¬ 
penditures. " Several computer-based large- 
scale econometric models are used, including 
Chase Econometrics, Wharton, Evans Eco¬ 
nomics, Merrill-Lynch Economics, Townsend 
Greenspan, and Data Resources, Inc. Several 
Federal agency models are also used for anal¬ 
ysis of grant and expenditure levels for spe¬ 
cific agency and government benefit pro¬ 
grams. 21 cbo provides Congress with the 
results of various econometric models, an 
evaluation of these results, and a synthesis 
with assumptions and analyses that form the 
basis of CBO projections. This has had the ef¬ 
fect of increasing the ability of Congress to act 
on budget matters more independently of the 
OMB estimates and projections. In the words 
of one congressional staff member: 

The major impact is that everyone is bet¬ 
ter informed. Less is done by stealth on the 
Hill today than in the past. The presence of 
CBO estimates and projections has done a 
great deal to keep OMB honest. We have tak¬ 
en some of the "crystal ball" out of the proc¬ 
ess. We are all professionals who attempt to 
understand how and why our projections 
differ.” 


"Congressional Research Service, Congressional Oversight, 
op. cit., p. 70. 

“Frantzich, “Congressional Applications, ” op. cit., p. 17. 
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The other congressional support agencies— 
OTA, GAO, and CRS-do make use Of such 
techniques on an intermittent basis depend¬ 
ing on the needs of specific studies or audits. 

This report has documented (in ch. 6) the 
widespread Federal agency use of comput¬ 
er-based modeling and decision support. Agen¬ 
cies claim that much of this analytical work 
is being used in agency planning and policy¬ 
making. If so, then Congress may have unreal¬ 
ized opportunities to more effectively check 
and systematically evaluate the analytical ba¬ 
sis for agency plans and policies. 

Congress could plan for a small number of 
pilot tests in areas where agency plans and pol¬ 
icies are clearly based on computer models and 
analyses, and where the authorizing or over¬ 
sight committees have a desire to independ¬ 
ently verify the models and analyses. Beyond 
this, Congress could develop a more extensive, 
ongoing capability for computer modeling and 
decision support. This could be a logical ex¬ 
tension of expertise already resident in the 
Senate Computer Center, HIS, and the con¬ 
gressional support agencies. 

The combination of access to agency elec¬ 
tronic records and databases (discussed earli¬ 
er) and use of computer-based analytical tech¬ 
niques can be very effective, as evidenced by 
the CBO experience with OMB budget and 
economic data and forecasts, and by the ex¬ 
perience of several State legislatures, such as 
in New York and Washington: 

• New York. The State legislature staff is 
one of the largest (4,000) and most sophis¬ 
ticated. Information technology has in¬ 
creased the volume of agency data direct¬ 
ly accessible by legislative staff, and has 
reportedly limited the ability of agencies 
to manipulate the data before providing 
summaries to the legislature. Through the 
use of computers, staff are able to: 
—create their own databases with 
selected agency data, their own data + 
or both; 

—analyze the data through use of sta¬ 
tistical software (e.g., Statistical 
Package for the Social Sciences); and 


-display the results of the analysis in 
bar graph, scatter plot, or spread¬ 
sheet format. 23 

• Washington. The State legislature has ac¬ 
cess to monthly expenditure, work load, 
and unit cost data for each major agency. 
Legislative staff analyze the data for any 
variance from budget and use spreadsheet 
software to present the results in graphic 
form to legislators. Information technol¬ 
ogy has helped staff perform such analy¬ 
ses more rapidly and thoroughly .24 

Congress could also initiate a pilot test of 
the decision conference technique. This tech¬ 
nique is intended to help the decisionmakers 
(e.g., individual Members of Congress or mem¬ 
bers of a congressional subcommittee or com¬ 
mittee) and staff directly use computer-based 
analytical tools and models within their own 
decision framework. As discussed in chapter 
6 , OTA located one Federal agency that oper¬ 
ates such a facility—the Office of Program 
Planning and Evaluation in the Department 
of Commerce. Commerce reports favorable re¬ 
sults from the relatively few decision confer¬ 
ences conducted to date. 

The basic idea would be to help Members 
and staff work through a decision problem in 
a reasonably structured way so that options 
and implications can be clearly identified and 
evaluated using the best available informa¬ 
tion. The information would be drawn from a 
wide variety of sources—prior studies, com¬ 
puterized databases, results of computer mod¬ 
eling, expert opinion, public opinion polls, key 
trends, and the like. Decision analytic tools 
(e.g., computer software, graphics) would be 
used on the spot, for example, to help struc¬ 
ture and evaluate options. 

Again, a logical first step would be for the 
participating committees to review their over¬ 
sight responsibilities and current and prospec¬ 
tive oversight issues, and make a preliminary 
identification of priority decision areas where 
further analytical support is thought to be 


= 'Miewald, "State Legislature, ” op. cit., pp. 26-31. 
-■< I bid., pp. 42-52. 



169 


helpful and needed. Each of the candidate de¬ 
cision areas could then be screened to select 
those where computer modeling and decision 
support techniques seem especially applica¬ 
ble, perhaps because agencies or others are al¬ 
ready using these techniques or based on an 
independent assessment by congressional sup¬ 
port staff. 

For each decision area selected for a pilot 
test, a number of options could be considered. 
One option would be for the committees to re¬ 
quest a report from the relevant agencies on 
the models, assumptions, data, and the like 
that were used in arriving at the agency posi¬ 
tion or decision. Alternatively, or in addition, 
where feasible the committees could request 
a copy of the software used by the agency so 
that the committee could run the model with 
its own set of assumptions and data and com¬ 
pare and contrast the results. 

Another approach, not necessarily mutually 
exclusive, would be for committees to ask the 
agencies to use a previously agreed upon de¬ 
cision analytic framework in presenting deci¬ 
sion information to Congress. The framework 
could specify, for each particular decision area, 
how options should be developed and evalu¬ 
ated, including the dimensions of evaluation 
that should be used and how qualitative fac¬ 
tors are to be incorporated. This would not 
necessarily limit the agencies to only the speci¬ 
fied decision analytic framework, but would 
provide a minimum set of requirements for 
congressional oversight purposes. 

A further option, again not mutually exclu¬ 
sive with any of the above, would be for the 
committees to ask the Congressional Research 
Service to try preparing some issue briefs in 
a decision analytic framework, and the Con¬ 
gressional Budget Office to extend their budg¬ 
et and financial analyses to include other fac¬ 
tors relevant to the decisions at hand. Thus, 
CRS could use various decision support mod¬ 
els and techniques as adjuncts to the prepara¬ 
tion of selected issue briefs in their standard 
format and in a "decision brief" format. CRS 
could also make the models available for use 
by committee staffs (perhaps in the form of 
diskettes to be used on personal computers), 


and possibly conduct seminars for Members 
and/or staffs on using computer-based decision 
support techniques. 

As with committee access to agency files 
and databases discussed earlier, a complemen¬ 
tary action that committees could take is re¬ 
questing agencies within their jurisdiction to 
prepare and submit a listing or directory of 
major models and decision techniques used in 
selected priority decision areas. Again, agen¬ 
cies could be asked to participate in any gov¬ 
ernmentwide decision support directories or 
clearinghouses that may be established (see re¬ 
lated discussion in ch. 6). 

Finally, Congress may wish to consider es¬ 
tablishing one or more "situation rooms" for 
congressional oversight use. These could be 
specially designed facilities where a broad 
range of computer and analytical tools, elec¬ 
tronic databases, and computer graphics ca¬ 
pabilities would be setup for real-time use by 
Members and staff. Several alternative con¬ 
figurations were discussed in chapter 6 under 
decision support and government foresight. 

Video- and Computer-Conferencing 

Congress already makes some use of new 
electronic communication techniques such as 
electronic mail. However, Congress makes 
very little use of video- and computer-confer¬ 
encing—two other new techniques that offer 
significant oversight potential. 

Videoconferencing is essentially two-way 
live television where participants at both loca¬ 
tions can see and hear each other. Prior exper¬ 
iments with congressional videoconferencing 
have demonstrated both the technical feasi¬ 
bility and practical utility .25 As early as 1977, 


25 Fred B. Wood, Vary T. Coates, Robert L. Chartrand, and 
Richard F. Ericson, Videoconferencing Via Satellite Opening 
Congress to the People, Program of Policy Studies in Science 
and Technology, The George Washington University, Wash¬ 
ington, DC, April 1979. Also see Fred B. Wood, “Congressional 
Perceptions of Emerging Telecommunications, ” Technol ogi cal 
Forecasting and Social Change, vol. 8, 1975, pp. 189-212; and 
Fred B. Wood, “Congressional-Constituent Telecommunication: 
The Potential and Limitations of Emergent Channels, ” IEEE 
Transactions on Communications, vol. 23, No. 10. October 1975, 
pp. 1134-1142. 




170 


a congressional subcommittee hearing was 
held with public testimony by two-way satel¬ 
lite videoconference. 26 !n March 1985, OTA 
conducted a videoconference between Wash¬ 
ington, DC, and Alaska. 27 Executive agencies 
report small but growing use of videoconfer¬ 
encing. In the private sector, the use of video- 
conferencing is rising, especially for business 
executives and key technical staff, as aware¬ 
ness and experience builds and costs drop. 28 

Given the heavy time pressures on Members 
of Congress and their staffs, and the substan¬ 
tial costs associated with travel (whether by 
witnesses coming to Washington, DC, or 
Members going to field locations), videocon¬ 
ferences warrant consideration as an option. 
Based on current commercial charges, simple 
videoconferences between two locations with 
permanent studios can be arranged for $500 
to $1,000 per hour, depending on the geo¬ 
graphic distance and time of day. Costs are 
expected to drop in the future, as the range 
of videoconferencing options expands. 

Implementation alternatives for pilot tests 
of videoconferencing are straightforward, 
since there is already a history of successful 
demonstrations. Pilot tests could be run using 
a variety of commercial services, with congres¬ 
sional participants using existing facilities ei¬ 
ther in downtown Washington, DC, studio lo¬ 
cations or in the House and Senate recording 


““Ibid. , pp. 9-12. 

!7 OTA held a 2-hour videoconference on Mar. 29, 1985, be. 
tween Washington, DC, and Anchorage and Juneau, Alaska. 
Videoconference studio facilities and the satellite link were pro- 
vialed as a public service by ARCO Corp. Participants included 
congressional staff in Washington, DC, and State and local gov¬ 
ernment officials at the Alaska locations. 

2 *See for example, Gordon Heffron, "Teleconferencing 
Comes of Age,' IEEE Spectrum, October 1984, pp. 61-66; “Vid¬ 
eoconferencing: No Longer J ust a Sideshow, " BusinessWeek, 
Nov. 12, 1984, pp. 116-120; Susanna Opper and A. David Boom- 
stein, "Video Teleconferencing-Corporations Conquer Dis¬ 
tance, ” Computer Decisions, Nov. 15, 1984, pp. 62-68; Earle 
Adarns, 'Videoconferencing via Voice and Data Circuits, " Tel- 
excommunications, February 1985, pp. 1 19a-120a; “Videocon¬ 
ference ‘Co-op’ Looks Like Key to Success, ” Data Communi¬ 
cations, April 1985, pp.60-64; M. Fentress Hall, "Case History: 
Video Teleconferencing at NASA "’Telecommunications, J une 
1985, pp. 80 - 80 c; and J ohn Tyson, "Cutting Costs, Boosting 
Productivity: It’s Happening Slower Than Predicted, But Vid¬ 
eoconferencing U se I s I ncreasingin Business Today, "Satel¬ 
lite Communications, November 1985, pp. 39-42. 


studios. The technical and cost aspects of pos¬ 
sible videoconferencing pilot tests could be 
worked out by congressional support office 
staff, in consultation with commercial ven¬ 
dors. The subject matter of the pilot tests pre¬ 
sumably would be largely up to the participat¬ 
ing committees or subcommittees, who could 
be invited to identify a list of oversight topics 
where face-to-face input from and discussion 
with out-of-town persons would be helpful. 
Hopefully, the pilot tests actually conducted 
would be those with a favorable benefit/cost 
ratio, that is, where the actual costs of the 
videoconference would be significantly less 
than the costs of travel and related expenses 
for witnesses. 

With respect to computer conferencing, the 
commercially available options are even more 
diverse, geographic location is not a constraint 
as long as the participants have a computer 
terminal with a communications link, and cost 
is minimal (e.g., $10 to $30 per connect hour). 29 
Computer-conferencing could have across-the 
board applications in Congress, but particu¬ 
larly with respect to legislative and oversight 
functions. Computer-conferencing makes it 
possible for Members and staff to establish on¬ 
going "electronic discussions or meetings" 
with interested persons around the country. 
Computer-conferencing is becoming more fea¬ 
sible as the number of congressional offices 
and interested citizens with computer termi¬ 
nals increases. 

Another option to encourage computer-con¬ 
ferencing would be to ensure that House and 
Senate computers (and perhaps executive 
agency computers) are technically compatible. 
This could be viewed as an extension of exist¬ 
ing electronic mail capabilities. Apparently, at 


-'See for example, C. J ackson Grayson, J r., "Networking by 

Computer, TheFuturist, June 1984, pp. 14-17, and, in gener¬ 
al, the special section on "Networking,” pp. 9-23; Dennis Liv¬ 
ingston, “Computer Conferencing," Datamation, July 15, 1984, 
pp. 11 Iff; Alex Czajkowski and Sara Kiesler, “Computer-Me¬ 
diated Communication, ” National Forum, summer 1984, pp. 
31-34; Richard T. Rodgers, “ABA/net: A User’s Report, ” Le¬ 
gal Economics, May/June 1985, pp. 48-49; Andres Liana Jr., 
“Get Face-to-Face With Efficient Business Communications,’ 
Communication Age, August 1985, pp. 32-33; and “PARTICI¬ 
PATE: The Advanced Computer Teleconferencing System, ” 
Participation Systems, Inc., no date. 
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present, most House office computers can 
communicate electronically among themselves, 
but not with Senate or executive branch of¬ 
fice computers. Nor can many Senate office 
computers communicate. Removal of these 
technical barriers would presumably encour¬ 
age congressional computer-conferencing. 

Some illustrative topics for computer-con¬ 
ferencing include: 

• obtaining comments on draft legislation; 

• exchanging ideas on possible new legis¬ 
lative and oversight initiatives; 

• identifying possible subjects for congres¬ 
sional committee oversight; 

• keeping track of key trends and issues 
relevant to committee oversight juris¬ 
diction; 

• keeping track of key trends and issues in 
specific geographical and/or subject areas; 

• obtaining comments on draft committee 
oversight or legislative reports; 

• exchanging ideas on implementation of 
public laws; 

• keeping track of agency performance; 

• monitoring research results relevant to 
committee jurisdiction; and 

• monitoring key meetings, conferences, 
and activities that may be of interest. 

Again, a series of congressional pilot tests 
or demonstrations appears to be a reasonable 
way to proceed, in order to flesh out the bene¬ 
fits, costs, and possible pitfalls. Any such tests 
could benefit from the substantial body of pri¬ 
or research on computer conferencing. 30 


mSee for example, the special section on “person-to-person 
Networks, ’’ Bu//et/n of the American Society for Information 
Science, June 1978, pp. 9-23, including articles by Murray Tur- 
off, “The E IES Experience: Electronic Information Exchange 
System”; Starr Roxanne Hiltz, “Controlled Experiments With 
Computerized Conferencing"; Peter Johnson-Lenz, et al., "How 
Groups Can Make Decisions and Solve Problems Through Com¬ 
puterized Conferencing": and Jacques Vallee, et al., “Computer 
Conferencing: The Management Issues. ” Robert Johansen, Jac¬ 
ques Vallee, and Kathleen Spangler, Electronic Meetings (Read¬ 
ing, MA: Addison-Wesley, 19’79); Elaine H. Kerr and Starr Rox¬ 
anne Hiltz. Computer-Mediated Communication Systems: 
Status and A'va/uation|New York: Academic Press, 1982); Starr 
Roxannelliltz, Online Communities: A Case Study of theOf- 
fice of the Future (Nor-wood, NJ:Ablex Publishing, 1984); Starr 
Roxannelliltz and Murray Turoff. “Structuring Computer-Me¬ 
diated Communication Systems to Avoid Information Over¬ 
load, ” January! 981; Robert Johansen and Christine Bullen, 


Electronic Tracking of Agency 
and Executive Actions 

Congress frequently requests or directs spe¬ 
cific agency actions through public law, and 
through authorizations, appropriations, and 
oversight hearings and reports. To a signifi¬ 
cant degree, monitoring of agency compliance 
with congressional requests or directives is on 
an exception basis, given the large volume of 
items and competing demands for congres¬ 
sional attention. The potential for computer- 
assisted monitoring seems significant, both for 
tracking: 1) agency compliance with specific 
actions mandated by Congress; and 2) signif¬ 
icant agency action bearing on the intent and/ 
or effects of legislation. The House Informa¬ 
tion Systems Office has already implemented 
one such system—for tracking receipt of legis¬ 
latively mandated reports to Congress. 31 

A variety of pilot tracking applications 
could be developed. Each participating com¬ 
mittee or subcommittee could identify and de¬ 
velop a list of key agency action items man¬ 
dated by law or other congressional action 
within the committee's jurisdiction. These 
items could then be put into a computer pro¬ 
gram that would automatically flag items 
when due and note their status as being "on 
schedule, " "overdue," "rescheduled," "un¬ 
known, " and so forth, based on either direct 
electronic agency input or committee staff in¬ 
put derived from agency submissions. The re¬ 
sults of this tracking process could provide one 
basis for committee oversight of trouble spots 
and overall agency performance, investigation 
of any areas of serious noncompliance, reeval¬ 
uation of action items whose utility may have 
passed or been misjudged from the beginning, 
and, indeed, commendation for exemplary 
agency performance in carrying out congres¬ 
sional intent. 

"What To Expect From Teleconferencing, " Harvard Business 
Review, March-April 1984, pp. 4-10; Starr Roxanne Hiltz, "Com¬ 
puter Networking Among Executives: A Case Study of the 
white House Conference on Productivity, " J une 1984; Robert 
M. Fano, "Computer-Mediated Communication, " IEEE Tech¬ 
nology & Society Magazine, March 1985, pp. 3-6; and Edward 
G. Canning. “Mm-e Uses for Computer Conferencing, ” EDP 
Analyzer. August 1985. 

' Boyd Alexander, House Information Systems Office, let¬ 
ter to Fred Wood of OTA, Nov. 15, 1985. 
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Finally, a computerized tracking system 
could be devised to help participating commit¬ 
tees and subcommittees monitor key trends 
and developments, including agency activities, 
relevant to their jurisdiction. This could be a 


form of early warning of possible emerging 
problems and issues that warrant congression¬ 
al attention, but otherwise might escape the 
notice of the traditional oversight process. 
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Appendix A 

Other Issues 


The following issues are not within the primary 
focus of this report. Some are addressed in related 

OTA reports or studies. All warrant congressional 

attention, 

Electronic Communications Security 
and Privacy 

The importance of technical, administrative, and 
legal measures to maintain computer security was 
discussed earlier. Equally important is the secu¬ 
rity of the communication lines and networks used 
to transmit information between and among com¬ 
puters, terminals, and the like. Privacy (as well as, 
potentially, national security) can be compromised 
if either computer or communications security is 
breached. 

In a related, prior study entitled Federal Gov¬ 
ernment Information Technology: Electronic Sur¬ 
veillance and Civil Liberties (October 1985), OTA 
found that many new electronic communication 
technologies are ambiguously covered or not cov¬ 
ered at all by existing privacy law. For example, 
existing law offers little or no protection against 
interception of electronic mail, data communica¬ 
tion between computers, and digital transmission 
of video and graphic images. OTA also found that 
about 25 percent of Federal agency components 
use or plan to use electronic surveillance technol¬ 
ogies, many of which also are not clearly covered 
by existing law. One of several options available 
to Congress is to amend Title III of the Omnibus 
Crime Control and Safe Streets Act of 1968, the 
approach taken in H.R. 3378 and S. 1667, the Elec¬ 
tronic Communications Privacy Act of 1985. See 
OTA's report for further discussion. Although 
there is no immediate technical answer to protec¬ 
tion against electronic surveillance, technical 
options are being addressed in a separate OTA 
study, New Communications Technology: Impli¬ 
cations for Privacy and Security (forthcoming in 
late 1986). 

Electronic Record Systems Privacy 

The privacy of information stored in Federal 
Government record systems is protected in part 
by the same measures used to provide computer 
and communications security. However, these 
measures are directed against unauthorized access 


or misuse and abuse by authorized users. With re¬ 
spect to Federal record systems, new kinds of au¬ 
thorized uses (e.g„ computer matching of records 
in two or more Privacy Act record systems, use 
of the social security number as a de facto nation¬ 
al electronic identifier) far exceed those envisioned 
when Congress enacted the Privacy Act of 1974. 
While information technology offers many new op¬ 
portunities to improve the efficiency of govern¬ 
ment recordkeeping and help prevent and detect 
fraud, waste, and abuse, the technology also pre¬ 
sents new possibilities for inappropriate use or 
abuse of personal information. Relevant trends, is¬ 
sues, and policy options are discussed in OTA's 
forthcoming 1986 report entitled Federal Govern¬ 
ment Information Technology: Electronic Record 
Systems and Individual Privacy. 

Office Automation Impacts and Issues 

This study considered office automation technol- 
ogies-such as word processing, electronic mail, 
and optical disks-tothe extent such technologies 
are subsumed within information technology man¬ 
agement or IRM. However, office automation also 
is likely to have very specific impacts in areas such 
as the number, type, and content of office jobs; or¬ 
ganizational structure; quality of worklife; and em¬ 
ployee health and safety. These have been compre¬ 
hensively studied in a December 1985 OTA report 
entitled Automation of America Offices. 

Institutional Change in Federal 

Information Technology Management 
and Policymaking 

Over the last several years, a growing number 
of Members of Congress, industry leaders, and re¬ 
searchers have concluded that institutional change 
is needed in addition to legislative action and 
policy guidance on specific issues. Institutional 
change can itself focus on specific areas, such as 
strengthening the roles of the National Bureau of 
Standards and the National Security Agency in 
information systems security (see ch. 4), or estab¬ 
lishing a new Data Protection Board or Privacy 
Protection Commission' to oversee Privacy Act 
implementation (see extensive discussion in OTA, 


‘See H.R. 1721, the Data Protection Act of 1985. 


175 




176 


Electronic Record Systems and Individual Pri¬ 
vacy, forthcoming 1986). 

Institutional change can also focus on a broader 
range of issues. Options not considered in this 
study but deserving attention include: 

• upgrading the Information Policy Branch of 
the Office of Management and Budget's Of¬ 
fice of Information and Regulatory Affairs; 

• reestablishing an Office of Telecommunica¬ 
tions Policy (or the equivalent, e.g„ an Office 
of Federal Information Policy) in the Execu¬ 
tive Office of the President as a separate of¬ 
fice or perhaps as part of the Office of Science 
and Technology Policy; 2 

• establishing an Institute for Information 
Technology Research and Innovation (or the 
equivalent) in the executive branch (see re¬ 
lated discussion in ch. 3); 3 

• combining roles and resources from several 
agencies Lg., the Office of Management and 
Budget, the General Services Administration, 
the National Bureau of Standards) into a new 
Federal information management agency; and 


‘See, for example, H.R. 642, the Telecommunications Policy Coordi¬ 
nation Act of 1985. 

3 See, for example, H.R. 744, the Information Science and Technolo¬ 
gy Act of 1985. 


• creating a new study commission on national 
information technology and policy issues. 4 

International Information Management 
and Policy 

While this study focuses on national-and even 
more narrowly, Federal-information technology, 
management, and policy trends and issues, infor¬ 
mation technology knows no boundaries. The in¬ 
ternational flow of information over computerized 
data, voice, and video networks is essential to the 
national economy, international trade and diplo¬ 
macy, and national security. Canada, J apan, and 
many European nations have well-developed na¬ 
tional information policies, and many other na¬ 
tions are establishing such policies. Therefore, U.S. 
policymakers need to consider the international 
implications of domestic management and policy 
initiatives on information technology. 5 

'See S. 786, the Information Age Commission Act of 1985. Also see 
the proposal of the Association of Data Processing Service Organiza¬ 
tions for a “Temporary National Information Committee, ” and the 
“Panel on National Information Issues” formed by the American Fed¬ 
eration of Information Processing Societies. 

5 A separate OTA study on International Competition in the Services 
Industries (forthcoming 1986) is examining technical, trade, and pol¬ 
icy issues involving data processing and information services, computer 
software, and telecommunications. 



Appendix B 

OTA Federal Agency Data Request 


After reviewing all available sources of informa¬ 
tion on Federal use of information technology, 
OTA determined that important information was 
not available in certain areas critical to the OTA 
assessment. To meet the need for additional infor¬ 
mation, OTA drafted a request for current agency 
data covering the areas in which information was 
lacking or incomplete. The draft request was re¬ 
viewed by congressional staff of interested com¬ 
mittees, and then pretested in four agencies—the 
Energy Information Administration (Department 
of Energy), the Food and Nutrition Service (De¬ 
partment of Agriculture), the Office of the Assis¬ 
tant Secretary for Postsecondary Education (De¬ 
partment of Education), and the Veterans Admin¬ 
istration. Based on the results of the pretest, the 
data request was revised. (See attachment 1 for 
portions of the final, revised data request relevant 
to this report). 

In April 1985, the data request was sent to the 
13 cabinet-level agencies and 20 selected subcabi¬ 


net agencies (see attachment 2) with a turnaround 
time of 5 weeks. Sufficient copies were provided 
for each of the subcomponents of the cabinet agen¬ 
cies. Agencies were informed that no new data col¬ 
lection was to be conducted. An OTA staff mem¬ 
ber was identified who could be contacted to 
provided clarification where necessary. 

All agencies that were sent the request provided 
a response, although the responses varied in com¬ 
pleteness and quality. A total of 142 agency com¬ 
ponents provided information. While many of the 
agencies provided responses well within the time 
allotted, the completion time for the entire request 
(142 agency components) was approximately 2 
months. The data provided were compiled by OTA 
staff and appear as appropriate throughout the 
report. 

A draft copy of the OTA report was provided 
to each of the participating agencies for review and 
comment. 
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Attachment 1 

OTA FEDERAL AGENCY DATA REQUEST 
INFORMATION TECHNOLOGY MANAGEMENT 

A. Please provide the following technology data, to the extent available, f 0 1 
fiscal years 1 975 (actual), 1 980 through 1984 (actual by year), and 1985 
(planned). 

1975 1980 1981 1982 1983 1984 1985 


Technology (number of units in use by year) 

1. mainframe computers- 

a) systems _ _ _ _ _ _ 

b) central processing units _ _ _ _ _ _ _ 

2. terminals for mainframe 

computers _______ _ _ _ _ _ 

3. microcomputers (use 

(GSA definition*) _ _ _ _ _ _______ _ 

4. telephones _ _ _ _ _____ 

B. Please provide a copy of your agency's most recent 5-year plan and any 
other current planning document for Information technology (e.g., automated 
data processing, microcomputers, and telecommunications). 


C, For your agency's mainframe computers (i.e., major system acquisitions), 
please provide data, to the ex tent available, on the average age (in 
years/months) of operating mainframes and av erage procurement time (in 
years/months) of mainframes purchased in 1975, 1980, and 1984 (by year). 

1975 1980 1984 


Average age 

Average procurement time 


D.- Please list the major factors that are affecting (e.g., increasing or 
decreasing) the average procurement time for mainframe computers. 


*The GSA definition of microcomputer is: Any microprocessor-based work 

station capable of independent use — including stand-alone and networked 
"personal computers," "professional computers," "intelligent terminals," word 
processors, and Other similar devices—costing less than $10, 000 per unit, but 
excluding peripherals and separately purchased software. 
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E. of the following technologies your agency 

has used, is using, or is planning to use: 


Past Use 

Yes No 


Current Use Planned Use 

Yes No Yes No 


Audio-conferencing 

Teleconference ng 

(1-way video, 2-way audio) 

Videoconferencing 
(2-way video) 

Compute r-confe rend ng 
Teletext 

Videotext 
Cable television 
Interactive cable TV 
Expert systems/artificial 
intelligence 
Electronic mail 
Voice mail 
Optical disks 


F. For any technologies checked "yes" in guestion E above, please describe, 

to the extent feasible , the specific technology, application(s), users (or 

participants), location (s), date(s), costs, and results (or evaluation). 
Please provide a copy of any written reports on these uses. 


G. Has your agency conducted one or more information security risk analyses 

of computer/telecommunications systems since 1980? Yes _ No _ If yes, 

please provide data, if available, on the number of risk analyses conducted 
per year for the fiscal years 1980 and 1984. Please provide data, if 
available, on the average and high/low cost per risk analysis by year. Please 

provide a copy of your agency's three most recent computer (and 
telecommunications) security risk analyses. 
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H. Please indicate which, If any, of the following or other security 
techniques are used by your agency for protection of sensitive unclassified 
Information. * 

Yes No If Yes, for what % of systems that 
process sensitive unclassified 
information? 

Applications screening (i.e., 
management certification) 

Personnel screening 
Audit software (i.e., 
audit trails) 

Restrictions on dial-up access 
Password controls on access 
Encryption 
Back-up hardware 
Back-up of key data files 
Physical security for hardware 
Other 



I. Does your agency have an explicit information security policy for 
microcomputer users? Yes No • If yes, please attach a copy of your 

agency's security policy for microcomputers. 


J. Please indicate which, if any, of the following have provided your agency 
with assistance in developing security plans and policies during fiscal years 
1983. 1984, or 1985, and the date and nature of this assistance. 

Yes No If Yes, provide date and describe 
nature of assistance 

0MB _ _ _ 

GSA _ _ _ 

NBs _ _ _ 

NSA _ _ 

DOD Computer Security Center__ ___ _ 

Other Federal (specify) ___ _ 

Private contractor (specify) ~ __ _ 

Other non-Federal (specify) _ _ 


^Sensitive unci 9SSi fi sd information! information collected, maintained, 
and/or disseminated by an agency that is not classified but whose unauthorized 
release or use could compromise or damage privacy or proprietary rights, 
critical agency decisionmaking, and/or thS enforcement or implementation of 
public law or regulation under which the agency operates. 



K. Does your agency have a contingency plan for handling disruption of your 
major mainframe computer systems by external factors, (e.g., electric power 
failure, data network Interruption, natural disaster, sabotage)? Yes ___ 

No _. If yes, please provide a copy. 


L. Please provide data, to the extent available, on your agency's funding and 
staffing (in full-time equivalents) for computer and communications security 
for fiscal years 1 975 and 1980 through 1985. 

JL975 _1980 1981 _1982_ 1983 1984_ 1985. 


Funding (current dollars) 

Staff (full-time equivalents) 


M. Does your agency have an established procedure for tracking and analyzing 
computer-related crime in your agency? Yes No . If yes, please 

describe in detail. In either case, please provide your agency's best 
estimate, to the extent feasible, of the number and type of compute-related 
crimes for 1984; indicate whether the perpetrator was an agency employee, a 
Federal employee from another agency, a Federal contractor employee, or a 
person not associated with the Federal Government; indicate whether criminal, 
civil, and/or administrative proceedings were initiated; and provide the 
results thereof. 


N. Does your agency have an established policy on employee access to agency 
computers (e.g., what employees are authorized to access which computers)? 

Yes No_. If yes, please describe in detail, Including a description 

of the criteria on which determinations of employee authorizations are 
based. Does the policy extend to employee access to microcomputers? 

Yes No . If yes, please provide details. 
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PUBLIC INFORMATION 


A. Please provide budget, staffing, and activity data, to the extent . 
available, for fiscal years 1980 and 1984 (actual by year), 1985 (projected), 

and 1986 (anticipated) for your agency's public information activities, 
defined to include: 

1. Printing and publishing (e.g., number of titles, total copies, total 

pages, fee or free) . Break out in-house, contractors, StC. 

2. Public affairs (e.g., number of conferences, seminars, and/or 

workshops on information dissemination and public access and 
awareness of agency information) 

3. Libraries and information centers (e.g., number of libraries, 

number of information centers or clearinghouses). Break out 
in-house, contractors, etc. 

4. Statistical activities (e.g., number of surveys, average sample 

size). Break out in-house, contractors, etc. 


B. Has your agency compiled any data or conducted or sponsored any studies on 
the Impact of any changes in your public information acclivities on user 
groups, agency clients, and/or the general public? Yes No If yes, 

please provide copies of such materials. If no, please describe plans to 
compile such data or conduct or sponsor such studies. 


C. Does your agency have a directory or catalog of your public information 

activities and produces? Yes _ No If yes, please provide copies. If 

no, please describe any plans to compile such a directory or catalog. 


D. Does your agency make available or disseminate any public information In 
electronic format (e.g., computer tape or disk, direct electronic)? 

Yes No . If yes, please provide further details below. If no, please 

describe any plans co disseminate electronically. 


E. For each specific public information product (e.g., report, data base, 
statistical series) available in electronic format, please provide the 
following information, to the extent available: 

1. Name of public information product and startup date 

2. Statutory or regulatory authority or requirement, if applicable 

3. Brief description of product (e.g., size and contents of data base) 

4. Type of electronic format (e.g., computer tape or disk, direct 

electronic, dial-up access) 

5. Information available: directly from Government agency, from 

Government contractor, from commercial vendor, or combination 
(please specify) 

6. Number of users per year for fiscal year 1984 



7. Type of users if known (e. g., general public, university 
researchers, 1 i b r a r i e s , State/local governments, business 
corporations, public Interest groups, trade associations) 
with percentage of 1984 total use by type of user 

8. Fee schedule (e.g., free, subscription, one-time use fee) and 

typical charges 

9. Currently available in paper form? Yes No If yes, what 

is the cost? If no, was the product previously available in 
paper form, and if so, what did it cost and when was it terminated 

10. If your agency is providing public information In electronic format 
Instead of paper format, please list and discuss the reasons why 
(e.g., comparative cost, user preference, competing products) 


F. Has your agency conducted or sponsored any studies on the impact of 

provision of public Information in electronic form? Yes No If yes 

please provide copies of such studies. If no, please describe any plans to 
conduct or sponsor such studies. 


G. Does your agency have any specific policies or procedures on provision of 
public Information (e.g., with respect to fee schedules, cost recovery, 
contracting out, mode of access, private sector provision)? Yes 
No_. If yes, please provide a copy. 


H. Does your agency conduct activities designed to increase public awareness 
of, access to, or use of your public information? Yes No If yes, 

please list and describe these activities. If no, please describe any plans 
to conduct such activities. 


I . Does your agency make any use of remote printing or printing-on-demand 
technology (e.g., printing out copies of reports only as reguested and/or at 
remote, decentralized locations)? Yes No . If yes, please provide 

detailed information on the specific use extent use, location(s), and 
cost. If no, please describe any plans to use such technology. 
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COMPUTER-BASED DECISION SUPPORT 


A. Does your agency use computer-based modeling (including simulation) to 
support agency activities and programs (including decisionmaking on Federal 
Government policies and programs within your agency's jurisdiction)? Yes 
No . If yes, please provide the detailed information below. 

B. Does your agency have a directory of modeling applications within your 

agency? Yes No . If yes, what is the format of the directory (e.g., 

paper, microfiche, on-line electronic, computer tape)? If the directory is in 
paper or microfiche format, please provide a copy (paper preferred). 

C. Does your agency have a clearinghouse or other central reference point 
(e.g., a person Or organizational unit that maintains current information) 

about modeling applications? Yes No . If yes, please identify the 

clearinghouse (or person's) name, location, and telephone number. 

D. Does your agency have procedures or policies on the availability of 
modeling details (e.g., structure, assumptions, input data) to the public? 

Yes _ No _. To Congress? Yes _ No_. If yes, please provide a 

copy of such procedures or policies. 

E. Has your agency conducted or sponsored any studies on the impact or use of 

modeling to support agency decisionmaking? Yes _ No_. If yes, please 

provide copies of such studies. 

F. Please estimate the total number of modeling applications used in 1 984 , 
and list the 10 areas of application (e.g., estimate air pollution levels, 
project future level of Medicare/Medicaid beneficiaries, simulate climatic 
change) with the heaviest use. 

1984 total applications _ 

10 heaviest areas of application: 

1. 


2 . 


3 . 


4 . 


5 . 


6 . 


7 . 


9 . 


10 * 
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G. Please indicate which, if any, of the following computer-assisted decision 
analytic techniques your agency Is using or is planning to use: 


Current Use 
Yes No 


Planned Use 
Yes No 


Spreadsheet software (e.g., 

Lotus 1-2-3, VisiCalc) 

Forecasting techniques (e.g., Delphi) 

Quantitative decision analytic 
techniques (e.g., linear 
programming, queuing analysis, 
systems analysis, critical path 
analysis) 

Quantitative decision analytic 
techniques with judgmental input 
(e.g., decision trees, subjective 
probability, multi-attribute 
utility) 

Decision conference techniques 

(e.g., interactive use of computer 
assisted analytical techniques by 
decisionmakers in group situation) 

Electronic voting techniques (e.g., 
consensor) 

C o m puter - conferenc i ng for decision 
analysis 

Other 


H. For any techniques checked "yes" in question G above, please describe, to 
the extent feasible, the specific technique, application(s), user(s), costs, 
and results (or evaluation). Please provide a copy of any written reports on 
these uses. 
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I . D06S your agency have the following: 

Yes No 

Directory of decision analytic techniques 
Clearinghouse of decision analytic techniques 
Decision analytic support center . 

If yes to any of the above, please provide copies of relevant 
descriptive documents and the names, locations, and telephone 
numbers of knowledgeable persons. If no to all of the above, 
please describe any plans to initiate such activities. 

J. Has your agency conducted or sponsored any studies on the impact of using 
decision analytic techniques to support agency decisionmaking? 

Yes _ No If yes, please provide copies of such studies. 
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Attachment 2 


Federal Departments and Agencies 


Cabinet Department 


Number of Agency 
Components Responding 


Agriculture 

Commerce 

Defense 

Education 

Energy 

Health and Human Services 

Housing and Urban Development 

Interior 

Justice 

Labor 

S tate 

Transportation 
T reasury 


25 

17 

14 

2 (agency-wide) 

rest of agency) 
9 

1 (agency-wide) 

9 

13 

8 

1 (agency-wide) 

11 

9 

Subtotal 122 


Independent Agencies 


Commission on Civil Rights 1 

Consumer Product Safety Commission 1 

Environmental Protection Agency 1 

Equal Employment Opportunity Commission 1 

Federal Communications Commission 1 

Federal Elections Commission 1 

Federal Emergency Management Agency 1 

Federal Reserve System 1 

Federal Trade Commission 1 

General Services Administration 1 

National Aeronautics and Space Administration 1 

National Archives and Records Administration 1 

Nuclear Regulatory Commission 1 

Securities and Exchange Commission 1 

Selective Service System 1 

Small Business Administration 1 

Arms Control and Disarmament Agency 1 

U.S. Information Agency 1 

Agency for International Development 1 

Veterans Administration 1 

Subtotal 2 0 


TOTAL 


142 



Appendix C 

List of Contractor Reports 


Copies of the following contractor reports com¬ 
pleted in support of this assessment are available 
from the National Technical Information Service, 
5285 Port Royal Road, Springfield, VA 22161, 
(703) 487-4650. 

1. Rex V. Brown, Personalized Decision Analy¬ 
sis As An Expert Eli-citation Tool: An In¬ 
structive Experience in Information Security 
Policy (Feb. 25, 1985); A Brief Review of Ex¬ 
ecutive Agency Uses of Personalized Decision 
Analysis and Support (Mar. 14,1985); Se- 
lected Applications of Computer-Aided Deci¬ 
sion Analysis (M ay 10,1985); and Decision 
Analysis As a Tool of Congress (May 10, 
1985), all prepared for OTA by Decision Sci¬ 
ence Consortium, Inc. 

2. Stephen Frantzich, Congressional Applica¬ 
tions of Information Technology, prepared for 
OTA by Congressional Data Associates, Feb¬ 
ruary 1985. 

3. Henry FI. FHitchcock, Lisa Heinz, and Joseph 
F. Coates, Scenarios of Five Federal Agencies 
(1991-95)As Shaped By Information Technol¬ 
ogy, prepared for OTA by J.F. Coates, Inc., 

J une 21, 1985. 

4. Kenneth L. Kraemer, J ohn Leslie King, and 
David G. Schetter, Innovative Use of Infor¬ 
mation Technology in Factivating Public Ac¬ 
cess to Agency Decisionmaking: An Assess¬ 
ment of the Experience in State and Local 


Governments, prepared for OTA by the Irvine 
Research Corp., March 1985. 

5. J ohn C. Kresslein, A Comparative Review of 
Information Technology Management Prac¬ 
tices in Sdected State Governments, prepared 
for OTA by the Institute of Information Man¬ 
agement, Technology and Policy, College of 
Business Administration, University of South 
Carolina, December 1984. 

6. Karen B. Levitan, Patricia D. Barth, and Di¬ 
ane Griffin Shook, Agency Profiles of Civil 
Liberties Practices, prepared for OTA by the 
KBL Group, Inc., Dec. 28, 1984. 

7. Charles R. McClure and Peter Hernon, Fed¬ 
eral Government Provision of Public Informa¬ 
tion: Issues Rdated to Public Access, Tech¬ 
nology, and Laws/Regulations, prepared for 
OTA by Information Management Consul¬ 
tant Services, Inc., Dec. 28, 1984. 

8. Robert Miewald, Keith Mueller, and Robert 
Sittig of the University of Nebraska-Lincoln, 
State Legislative Use of Information Technol¬ 
ogy in Oversight, prepared for OTA, J anuary 
1985. 

9. Sanford Sherizen, Federal Computers and Tel¬ 
ecommunications: Security and Reliabihty 
Considerations and Computer Crime Legisla¬ 
tive Options, prepared for OTA by Data Secu¬ 
rity Systems, Inc., February 1985. 
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Appendix D 

Other Reviewers and Contributors 


Ralph W. Adams 
National Security Agency 

Margaret Alter 
Internal Revenue Service 

Gerald Barney 
Global Studies Center 

Roger G. Barry 
University of Colorado 

Danny J. Boggs 

U.S. Department of Energy 

Alden Bryant 

Earth Regeneration Society 

Daniel Burk, Esq. 

Cadwalader, Wickersharn, & Taft 

Center for Climatic Research 
University of Wisconsin: 

Reid A. Bryson 
J ohn Kutzbach 

Bob Chen 

University of North Carolina and National 
Academy of Sciences 

Congressional Research Service: 

J ohn J ustus 
Dan Mel nick 
Sandra Milevski 
Fred Pauls 
Harold Relyea 

Eileen D. Cooke 

American Library Association 

Robert H. Courtney, Jr. 

RCI 

Mary Culnan 

The American University 

Robert E. Dickinson 

National Center for Atmospheric Research 

Federal Bureau of Investigation: 

William A. Bayse 
Stephen W.C. Holbrook 
Thomas Walczykowski 


J ohn J . Franke, J r. 

U.S. Department of Agriculture 

General Services Administration: 

Francis A. McDonough 
David Mullins 
Donald Page 
Neil Stillman 

Lindsay Grant 

U.S. Department of State (ret'd) 

M. Blake Greenlee 
Citicorp Information Systems 

Edward J . Hanley 
Environmental Protection Agency 

Ronald H. Hinckley 

National Strategy Information Center 

Diane Holt 
Wesleyan University 

Sherwood B. Idso 

U.S. Department of Agriculture 

j .e. Ingram 
IBM Corp. 

George Kukla 
Columbia University 

Robert Lamson 

National Science Foundation 

Alan S. Miller 

World Resources Institute 

National Computer Security Center: 
AnneJ . Cuomo 
J eff Chandler 

Fred A. Newton 111 

Federal Emergency Management Agency 

Michael Nugent 
Electronic Data Systems 

Hugh O'Neill 

U.S. Department of Health and Human 
Services (formerly) 

David PI ocher 
OM B Watch 


Donald E. Fossedal 

U.S. Government Printing Office 
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Chester F. Ropelewski 
National Oceanic and Atmospheric 
Administration 

Ralph Schofer 

National Bureau of Standards 

Ronald M. Scroggins 
Nuclear Regulatory Commission 

J ack J. Sharkey 
Veterans Administration 

Ollie Smoot 

Computer and Business Equipment 
Manufacturers Association 

George Sotos 

U.S, Department of Education 

Patricia G. Strauch 
Mead Data General 

U. S. Department of Commerce: 

J immie D. Brown 
Chris Kyriazi 

U. S. Department of State: 

William L. Ball, III 
Kenneth R. Erney 


U.S. Department of Transportation: 
Bradley H. Hoke 
J ohn E. Turner 

U.S. Department of the Interior: 
Oscar W. Mueller, J r. 

Leon W. Transeau 

U. S. General Accounting Office: 
Morey Chick 
Harold J. Podell 

U.S. Geological Survey 
U. S. Department of the Interior: 
Richard S. Williams, J r. 

Ethan T. Smith 

Kenneth E.F. Watt 
University of California at Davis 

Frederic G. Withington 
Arthur D. Little, Inc. 

Ken Wong 

BIS Applied Systems, Ltd. 
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